Technical Information
Malicious functions:
Injects code into
the following user processes:
- System.exe.exe
Modifies file system:
Creates the following files:
- %TEMP%\winddasdas.exe
- %TEMP%\kG
- %TEMP%\System.exe.exe
- %TEMP%\AcErcWDcrktcN
Miscellaneous:
Creates and executes the following:
- '%TEMP%\winddasdas.exe'
- '%TEMP%\System.exe.exe'
