CRC32: 5B0537B5
MD5: 0A210F9CFF84C8D597656C8C6DDF32DF
SHA-1: 20590CB817C2EE34CE803A203913BB185928FBB4
===================================================
MD5: 0A210F9CFF84C8D597656C8C6DDF32DF
SHA-1: 20590CB817C2EE34CE803A203913BB185928FBB4
===================================================
One or more files with the name HM1BFPUJ.EXE creates, deletes, copies or moves the following files and folders:
- Creates c:\docume~1\user\locals~1\temp\xla6.tmp
- Deletes c:\windows\system32\drivers\cdaudio.sys
- Copies file4�_CHAR(0x03)_ \dllcache\cdaudio.sys to c:\windows\system32\drivers\cdaudio.sys
- Deletes c:\docume~1\user\locals~1\temp\herss.exe
- Deletes c:\docume~1\user\locals~1\temp\cvasds0.dll
- Creates c:\docume~1\user\locals~1\temp\cvasds0.dll
- Deletes c:\hm1bfpuj.ex
- Copies filec:\docume~1\user\locals~1\temp\herss.exe to c:\hm1bfpuj.ex
- Deletes c:\autorun.in
- Creates c:\autorun.in
- Deletes d:\hm1bfpuj.ex
- Copies filec:\docume~1\user\locals~1\temp\herss.exe to d:\hm1bfpuj.ex
- Deletes d:\autorun.in
- Creates d:\autorun.in
- Deletes c:\docume~1\user\locals~1\temp\am1.rar
- Creates c:\docume~1\user\locals~1\temp\am1.rar
- Deletes c:\docume~1\user\locals~1\temp\am.exe
- Creates c:\docume~1\user\locals~1\temp\am.exe
