Technical Information
Malicious functions:
Creates and executes the following:
- '%TEMP%\CSrss.exe' "del" <Full path to virus>
Modifies file system :
Creates the following files:
- %TEMP%\CSrss.exe
- %TEMP%\aut2.tmp
- %TEMP%\jxvqkvv
- %TEMP%\aut1.tmp
- %TEMP%\dlouhhy
- %TEMP%\CSrss.exe.ini
Deletes the following files:
- %TEMP%\aut2.tmp
- %TEMP%\jxvqkvv
- %TEMP%\aut1.tmp
- %TEMP%\dlouhhy
Deletes itself.
