This Trojan may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

Upon execution, this Trojan drops a copy of itself. This Trojan creates a registry entry to enable its automatic execution at every system startup. This Trojan connects to URLs to download malicious files detected by Trend Micro as follows:

• TROJ_DLOADER.MLF
• TROJ_VUNDO.CIJ
• TROJ_PAKES.IR
• TROJ_NUWAR.AB

More...