If your computer has not been protected with anti-virus software and has been infected with malware, you will need to take the following actions to delete this:
- Delete the original trojan file (its location on the infected computer will depend on how the program got onto the computer).
- Delete the following file:
- Install the current system time.
- Run a full Kaspersky Antivirus scan of the computer with updated antivirus databases (download trial version).
After launching, the trojan retrieves the file saved in the current user's temporary file directory "%Temp%" as
%Temp%\install_temp.bat from its body (25 bytes)
The extracted file is a shell script and contains the following commands:
@echo off time 0:00 >nul
The trojan then launches the following script:
cmd.exe /c "%Temp%\install_temp.bat"
The system time is changed to "0:00". The trojan then shuts down.
A trojan program that carries out destructive actions on the user's computer. It is a Windows application (PE-EXE file). 7710 bytes. Written in C++.