Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- %HOMEPATH%\Start Menu\Programs\Startup\Nvidia.lnk
Malicious functions:
Executes the following:
- '<SYSTEM32>\cmd.exe' <Full path to file> pingia 2904 pongumais
Terminates or attempts to terminate
the following system processes:
- <SYSTEM32>\cmd.exe
Modifies file system:
Creates the following files:
- %TEMP%\jbqsb.MbZ
- %TEMP%\aut1.tmp
Deletes the following files:
- %TEMP%\aut1.tmp
