Creates the following mutex, so that only one instance of the Trojan runs on the compromised computer at any one time:_Toolbar_Class_32Creates the following backup copy of the valid system file %System%\userinit.exe:%Windir%\system\userinit.exeThe Trojan then creates a copy of itself as the following file, overwriting the original %System%\userinit.exe file in the process:%System%\
No comments:
Post a Comment