This Trojan has a malicious payload. This Trojan is a Windows PE EXE file. It is 35328 bytes in size.
The Trojan runs the following commands within its working folder:
echo del *.txt echo del *.doc echo del *.xls echo del *.com echo del *.dll echo del *.dot echo del *.bin echo del *.htm echo del *.ppt echo del *.avi echo del *.mp3 echo del *.src echo del *.bmp echo del *.cfg echo del *.mpg echo del *.drv echo del *.vxd echo del *.mdb
This will lead to all files with the extensions shown above being deleted from the Trojan’s working folder.
If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:
- Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
- Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).