Technical Information
Modifies file system :
Moves itself:
- from <Full path to virus> to <Current directory>\urfg687NC
Miscellaneous:
Searches for the following windows:
- ClassName: 'Shell_TrayWnd' WindowName: ''