Technical Information
To ensure autorun and distribution:
Changes the following executable system files:
- %WINDIR%\Help\bnts.dll
Modifies file system :
Creates the following files:
- %WINDIR%\system\OEMINFO.inf
- %WINDIR%\creation.bat
- %WINDIR%\rieysha.bat
- %WINDIR%\system\pesanVIRUSmaker.txt
- %WINDIR%\system\caraPasangPict.rtf
- %WINDIR%\system\OEMLOGO.inf
- %WINDIR%\virus.bat
- %WINDIR%\repair.bat
- %WINDIR%\hapus.bat
- %WINDIR%\gantiNAMA.bat
- %WINDIR%\detect.bat
- %WINDIR%\registry.bat
- %WINDIR%\system\info.txt
- %WINDIR%\Cursors\cursorANEH.txt
- %WINDIR%\Help\mciadmin.htm
- %WINDIR%\system\info7.txt
- <SYSTEM32>\xmltok.dll
- <SYSTEM32>\xcopy.rtf
- <SYSTEM32>\zonedon.txt
- %WINDIR%\system\info3.txt
- %WINDIR%\system\info2.txt
- %WINDIR%\system\info1.txt
- %WINDIR%\system\info6.txt
- %WINDIR%\system\info5.txt
- %WINDIR%\system\info4.txt
- %WINDIR%\RTLCPL.inf
- %WINDIR%\nsreg.inf
- %WINDIR%\rename.inf
- %WINDIR%\pesene_seng_gawe2.inf
- %WINDIR%\pesene_seng_gawe1.inf
- %WINDIR%\pesene_seng_gawe.inf
- %WINDIR%\cut.inf
- %WINDIR%\copyfile.inf
- %WINDIR%\oemif.inf
- %WINDIR%\paste.inf
- %WINDIR%\delete.inf
- %WINDIR%\format.inf
- %WINDIR%\pesene_seng_gawe3.inf
- %WINDIR%\4.bat
- %WINDIR%\3.bat
- %WINDIR%\2.bat
- %WINDIR%\7.bat
- %WINDIR%\6.bat
- %WINDIR%\5.bat
- %WINDIR%\pesene_seng_gawe6.inf
- %WINDIR%\pesene_seng_gawe5.inf
- %WINDIR%\pesene_seng_gawe4.inf
- %WINDIR%\1.bat
- %WINDIR%\0.bat
- %WINDIR%\pesene_seng_gawe7.inf
- <SYSTEM32>\daftar_site_keren.rtf
- <SYSTEM32>\freecel7.rtf
- <SYSTEM32>\freecel6.rtf
- <SYSTEM32>\HackingFS.rtf
- <SYSTEM32>\php.rtf
- <SYSTEM32>\panduan_pakai_windows.rtf
- <SYSTEM32>\freecel2.rtf
- <SYSTEM32>\freecel1.rtf
- <SYSTEM32>\freecel.rtf
- <SYSTEM32>\freecel5.rtf
- <SYSTEM32>\freecel4.rtf
- <SYSTEM32>\freecel3.rtf
- <SYSTEM32>\googleHack.rtf
- %WINDIR%\system\Pesan_dari_virus_maker.inf
- <SYSTEM32>\kenpaBINGGUNG.rtf
- <SYSTEM32>\formatAja.rtf
- C:\AUTOEXEC.BAT
- C:\AUTOEXEC.BAT-
- <SYSTEM32>\Pesan_dari_virus_maker.bat
- <SYSTEM32>\jangan_asal_delete.rtf
- <SYSTEM32>\caraSOSIALengginer.rtf
- <SYSTEM32>\sourceCODEvirus.rtf
- <SYSTEM32>\ga_usah_marah.rtf
- <SYSTEM32>\hancurkan_sistem.rtf
- <SYSTEM32>\penuhin_system.rtf
- <SYSTEM32>\hidphone.txt
- <SYSTEM32>\geo.txt
- <SYSTEM32>\hostname.txt
- <SYSTEM32>\freecell.txt
- <SYSTEM32>\pesan_virus_makers.txt
- <SYSTEM32>\himem.txt
- <SYSTEM32>\fltMc
- <SYSTEM32>\eventquery.txt
- <SYSTEM32>\xolehlp.txt
- <SYSTEM32>\hlink.txt
- <SYSTEM32>\hkcmd.txt
- <SYSTEM32>\gpdit.txt
- <SYSTEM32>\virus.vbs
- <SYSTEM32>\freecell17.rtf
- <SYSTEM32>\freecell16.rtf
- <SYSTEM32>\freecell15.rtf
- <SYSTEM32>\freecell10.rtf
- <SYSTEM32>\freecell19.rtf
- <SYSTEM32>\freecell18.rtf
- <SYSTEM32>\freecell1.rtf
- <SYSTEM32>\autorun.inf
- <SYSTEM32>\repairs.bat
- <SYSTEM32>\freecell14.rtf
- <SYSTEM32>\freecell13.rtf
- <SYSTEM32>\freecell12.rtf
- %WINDIR%\autorun.inf
- %WINDIR%\penuhinWINDOWS12.rtf
- %WINDIR%\penuhinWINDOWS11.rtf
- %WINDIR%\penuhinWINDOWS10.rtf
- %WINDIR%\daftarNilai.rtf
- %WINDIR%\dokumenPenting.rtf
- %WINDIR%\jangan_dihapus.rtf
- %WINDIR%\penuhinWINDOWS6.rtf
- %WINDIR%\penuhinWINDOWS5.rtf
- %WINDIR%\penuhinWINDOWS4.rtf
- %WINDIR%\penuhinWINDOWS9.rtf
- %WINDIR%\penuhinWINDOWS8.rtf
- %WINDIR%\penuhinWINDOWS7.rtf
- %WINDIR%\DaftarTELPONpenting.rtf
- %WINDIR%\cmd.txt
- %WINDIR%\NOTEPAD.txt
- %WINDIR%\DxpAppEx.txt
- %WINDIR%\uninst.txt
- %WINDIR%\sampah.txt
- %WINDIR%\pain.txt
- %WINDIR%\wplog.txt
- %WINDIR%\jadwalMANGGUNG.rtf
- %WINDIR%\ceritaXXX.rtf
- %WINDIR%\SET.txt
- %WINDIR%\SkyTel.txt
- %WINDIR%\winhelp.txt
- %WINDIR%\Pesan2.rtf
- %WINDIR%\Pesan1.rtf
- %WINDIR%\pesan.rtf
- %WINDIR%\Pesan5.rtf
- %WINDIR%\Pesan4.rtf
- %WINDIR%\Pesan3.rtf
- C:\Documents and Settings\Pesan.doc
- %PROGRAM_FILES%\PesanQ.Txt
- C:\Pesan_dari_virus_maker.Txt
- %WINDIR%\bacaAku.rtf
- %WINDIR%\jangandibuka.rtf
- %WINDIR%\Pesan_dari_virus_maker.rtf
- %WINDIR%\Pesan6.rtf
- %WINDIR%\penuhinWINDOWS.rtf
- %WINDIR%\ngapain_juga_dibuka.rtf
- %WINDIR%\bosan_isi_sama.rtf
- %WINDIR%\penuhinWINDOWS3.rtf
- %WINDIR%\penuhinWINDOWS2.rtf
- %WINDIR%\penuhinWINDOWS1.rtf
- %WINDIR%\Pesan9.rtf
- %WINDIR%\Pesan8.rtf
- %WINDIR%\Pesan7.rtf
- %WINDIR%\Panduan_Jadi_virus_maker.rtf
- %WINDIR%\Panduan_jadi_hacker.rtf
- %WINDIR%\Pesan10.rtf
- %WINDIR%\virusMAKER_.htm
- %WINDIR%\virologi.htm
- %WINDIR%\bego.htm
- %WINDIR%\yahoo.htm
- %WINDIR%\friendster.htm
- %WINDIR%\twain_32.htm
- %WINDIR%\turorial.htm
- %WINDIR%\utama.htm
- %WINDIR%\cookies.htm
- %WINDIR%\DS.htm
- %WINDIR%\ah-uh.htm
- %WINDIR%\e-zine.htm
- %WINDIR%\janganDIDELETE.htm
- %WINDIR%\panudan8.htm
- %WINDIR%\panudan7.htm
- %WINDIR%\panudan6.htm
- %WINDIR%\panudan17.htm
- %WINDIR%\panudan10.htm
- %WINDIR%\panudan9.htm
- %WINDIR%\panudan2.htm
- %WINDIR%\panudan1.htm
- %WINDIR%\panudan.htm
- %WINDIR%\panudan5.htm
- %WINDIR%\panudan4.htm
- %WINDIR%\panudan3.htm
- %WINDIR%\hilang.txt
- %WINDIR%\jogja_virus_maker.txt
- %WINDIR%\carder.txt
- %WINDIR%\sial.txt
- %WINDIR%\lagi_sedih.txt
- %WINDIR%\jangan_ganggu_aku.txt
- %WINDIR%\pesanVIRUS.txt
- %WINDIR%\twunk_32.txt
- %WINDIR%\twunk_16.txt
- %WINDIR%\internetHACKING.txt
- %WINDIR%\ceritaGABBY.txt
- %WINDIR%\bukaAJAH.txt
- %WINDIR%\vivaTOvirusMAKER.txt
- %WINDIR%\login.htm
- %WINDIR%\index.htm
- %WINDIR%\wmp11.log
- %WINDIR%\search.htm
- %WINDIR%\download.htm
- %WINDIR%\logout.htm
- %WINDIR%\PusingYAHhapus2nya.txt
- %WINDIR%\DasarKamuCeroboh.txt
- %WINDIR%\virusMakerBukanPenjahat.txt
- %WINDIR%\SW_Win2000X2.DLL
- %WINDIR%\twain.txt
- %WINDIR%\KasihanDEH_lo.txt
Deletes the following files:
- C:\AUTOEXEC.BAT-
