Removal Instructions

If your computer has not been protected with anti-virus software and has been infected with malware, you will need to take the following actions to delete this:

  1. Delete the original trojan file (its location on the infected computer will depend on how the program got onto the computer).
  2. Run a full Kaspersky Antivirus scan of the computer with updated antivirus databases (download trial version).

MD5: b2c0ead0a2758633814678973fe83145
SHA1: e615569bd32c9106b9b600e997c6daf0732b2a65


After launching the malicious file for execution, the trojan determines the version of Flash Player and then generates a link which it uses to try and download other software to the user's computer.The trojan uses the "loadMovie()" method to download and launch a file located at the following link:

http://3.v***<Flash Player>ff.swf version

For example, the link may be as follows "<WIN%208,0,22, ff.swf ".

The link did not work when creating the description.

Technical Details

A trojan program that downloads other software to the computer without the user's knowledge. It is a SWF file (Shockwave Flash), which contains ActionScript instructions. 139 bytes.