Technical Information
To ensure autorun and distribution:
Creates the following files on removable media:
- <Drive name for removable media>:\AutORUN.inf
- <Drive name for removable media>:\jBgsmymaMXHg0drvpwnznrxskmvQun\mttqbhpzrHOjpj6BwBxpoDooz2yltQ\Desktop.ini
Modifies file system :
Moves itself:
- from <Full path to virus> to <SYSTEM32>\winlogin.exe
Network activity:
Connects to:
- '00##.###tcallmeboomx.info':80
UDP:
- DNS ASK 00##.###tcallmeboomx.info
