Technical Information
To ensure autorun and distribution:
Creates the following files on removable media:
- <Drive name for removable media>:\autorun.inf
Malicious functions:
Executes the following:
- <SYSTEM32>\cmd.exe /c %WINDIR%\temp\m.bat
Modifies file system :
Creates the following files:
- C:\autorun.inf
- %WINDIR%\Temp\m.bat
- <SYSTEM32>\regedit.exe
Deletes the following files:
- <SYSTEM32>\regedit.exe
- <SYSTEM32>\telnet.exe
- <SYSTEM32>\taskmgr.exe
