<Drive name for removable media>:\Punya %USERNAME%.exe
<Drive name for removable media>:\FFE.exe
<Drive name for removable media>:\autorun.inf
Malicious functions:
To complicate detection of its presence in the operating system,
blocks the following features:
System Restore (SR)
Windows Security Center
Terminates or attempts to terminate
the following user processes:
AVP.EXE
nod32.exe
AVP32.EXE
avgcc.exe
ashAvast.exe
AVPM.EXE
Modifies file system :
Creates the following files:
<SYSTEM32>\ set.com
%WINDIR%\%USERNAME%.exe
C:\baca euy.txt
Sets the 'hidden' attribute to the following files:
<Drive name for removable media>:\msvbvm60.dll
<Drive name for removable media>:\autorun.inf
<Drive name for removable media>:\FFE.exe
Miscellaneous:
Searches for the following windows:
ClassName: 'ThunderRT6ComboBox' WindowName: ''
ClassName: 'ThunderRT6ListBox' WindowName: ''
ClassName: 'ThunderRT6FormDC' WindowName: ''
ClassName: 'ThunderRT6Frame' WindowName: ''
Scaricate Dr.Web per Android
Gratis per 3 mesi
Tutti i componenti di protezione
Rinnovo versione di prova tramite AppGallery/Google Pay
Continuando a utilizzare questo sito, l'utente acconsente al nostro utilizzo di file Cookie e di altre tecnologie per la raccolta di informazioni statistiche sui visitatori. Per maggiori informazioni