This Trojan may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.


It creates a registry entry for certain application names located under a certain key. This routine prevents the affected applications from running.

More...