Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = '<SYSTEM32>\userinit.exe,<Full path to virus>'
The page may not load correctly.
Added to the Dr.Web virus database: 2013-04-09
Virus description added: 2013-04-19