Technical Information
To ensure autorun and distribution:
Creates the following files on removable media:
- <Drive name for removable media>:\Autorun.inf
- <Drive name for removable media>:\cool.exe
Modifies file system :
Creates the following files:
- %TEMP%\~06.tmp
- <SYSTEM32>\kiks.txt
Sets the 'hidden' attribute to the following files:
- <Drive name for removable media>:\cool.exe
- %TEMP%\~06.tmp
Deletes the following files:
- %TEMP%\~06.tmp
Network activity:
Connects to:
- 'yy##3.cn':80
TCP:
HTTP GET requests:
- yy##3.cn/1.txt
UDP:
- DNS ASK yy##3.cn
