Technical Details

This Trojan opens different websites in the browser without the user's knowledge. It is a Windows PE EXE file. It is 16 416 bytes in size. It is written in Visual Basic.


The Trojan launches "Explorer" by sending the following link in parameters:


The Explorer then launches the default browser and opens the downloaded link in its window.

The Trojan then ceases running.

Removal Instructions

If your computer does not have antivirus protection and has been infected by this malicious program, follow the instructions below to delete it:

  1. Delete the original Trojan file (its location will depend on how the program originally penetrated the infected computer).
  2. Perform a full scan of the computer using Kaspersky Anti-Virus with up-to-date antivirus databases (download a trial version).