This Trojan may be dropped by other malware. It may arrive bundled with malware packages as a malware component. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It creates registry entries to enable this Trojan to add a copy of itself in the authorized applications list for firewall policy, thus preventing the system's firewall from blocking its purpose as a proxy server.

It also sends out unsolicited email to a list of addresses taken from the predefined servers using its own SMTP (Simple Mail Transfer Protocol) engine./p>Other malware may use this Trojan's capability in their respective email spamming routines to allow email messages to be sent without the use of email applications like Microsoft Outlook.
It connects to a possibly malicious URL. However, the said URL is inaccessible as of this writing.


More...