Technical Information
Malicious functions:
Executes the following:
- '<SYSTEM32>\tasklist.exe'
- '<SYSTEM32>\wermgr.exe' -queuereporting
Modifies file system :
Deletes itself.
The page may not load correctly.
Added to the Dr.Web virus database: 2013-11-06
Virus description added: 2013-11-06