Technical Information
Malicious functions:
Terminates or attempts to terminate
the following system processes:
- <SYSTEM32>\drwtsn32.exe
Modifies file system :
Creates the following files:
Deletes the following files:
- %TEMP%\~DFA489.tmp