Technical Information
Malicious functions:
Creates and executes the following:
- %TEMP%\IDMan.exe
- %TEMP%\Elite.exe
Terminates or attempts to terminate
the following user processes:
- ICQ.exe
Modifies file system :
Creates the following files:
- %TEMP%\IDMan_128.ico
- %TEMP%\CRNJEUFU
- %TEMP%\Elite.exe
- %TEMP%\IDMan.exe
Miscellaneous:
Searches for the following windows:
- ClassName: 'Shell_TrayWnd' WindowName: ''
