This Trojan program is designed to steal confidential data. It is a Windows PE EXE file, and is 34304 bytes in size. It is packed using a customized packer.

The Trojan copies itself to

%sysdir%\ntos.exe

with system, read only and archive attributes.

When copying it appends random-sized junk to…

Related Posts

This entry was posted on Wednesday, March 28th, 2007 at 3:28 am and is filed under Virus Threats.