This Trojan may be downloaded from remote sites by other malware, specifically TROJ_CHEPVIL.CThis Trojan drops the following files:
- JOKE_BLUESCREEN
- TROJ_RENOS.ADX
This Trojan creates registry entries to enable its automatic execution at every system startup. It also modifies the current system's wallpaper and screensaver.
This Trojan accesses Web sites to download a file detected as TROJ_FAKEALER.HO. It then executes the downloaded file. As a result, malicious routines of the downloaded file are exhibited on the affected system.