Technical Information
Malicious functions:
Executes the following:
- '<SYSTEM32>\wermgr.exe' -queuereporting
- '<SYSTEM32>\tasklist.exe'
Modifies file system :
Deletes itself.
The page may not load correctly.
Added to the Dr.Web virus database: 2013-08-30
Virus description added: 2013-08-30