Removal Instructions

If your computer has not been protected with anti-virus software and has been infected with malware, you will need to take the following actions to delete this:

  1. Delete the original program file (its location on the infected computer will depend on how the program got onto the computer).
  2. Delete the following file:

  3. Run a full Kaspersky Antivirus scan of the computer with updated antivirus databases (download trial version).


When launching, the trojan downloads a file from the internet using the following link:


Where <rnd> is a random sequence of digits.

The link did not work when creating the description. The downloaded file is saved in the current user's temporary file directory under the following name:


The downloaded file is then launched and the trojan shuts down.

Technical Details

A trojan program that downloads files from the internet without the user's knowledge and launches them. It is a Windows application (PE-EXE file). 7680 bytes. UPX packed. Its unpacked size is around 20 kB. Written in Visual Basic.