Technical Information
Malicious functions:
Creates and executes the following:
- '%WINDIR%\pp14.exe' <Full path to virus>
Executes the following:
- '<SYSTEM32>\cmd.exe' /c %WINDIR%\dxxdv34567.bat
Modifies file system :
Creates the following files:
- %WINDIR%\dxxdv34567.bat
- %WINDIR%\pp14.exe
- %WINDIR%\fdgg34353edfgdfdf
Sets the 'hidden' attribute to the following files:
- %WINDIR%\pp14.exe
Deletes itself.
