CRC32: 6D4BB304
MD5: 5AA3833703DAEE1E14BFFF0307EA2B97
SHA-1: 0CC44E2116863EC0C82878C807770D43F4080099
===================================================
MD5: 5AA3833703DAEE1E14BFFF0307EA2B97
SHA-1: 0CC44E2116863EC0C82878C807770D43F4080099
===================================================
One or more files with the name MB9X.EXE creates, deletes, copies or moves the following files and folders:
- Creates c:\docume~1\user\locals~1\temp\jna6.tmp
- Deletes c:\windows\system32\drivers\cdaudio.sys
- Copies file$�_CHAR(0x12)_\dllcache\cdaudio.sys to c:\windows\system32\drivers\cdaudio.sys
- Deletes c:\docume~1\user\locals~1\temp\herss.exe
- Deletes c:\docume~1\user\locals~1\temp\cvasds0.dll
- Creates c:\docume~1\user\locals~1\temp\cvasds0.dll
- Deletes c:\mb9x.ex
- Copies filec:\docume~1\user\locals~1\temp\herss.exe to c:\mb9x.ex
- Deletes c:\autorun.in
- Creates c:\autorun.in
- Deletes d:\mb9x.ex
- Copies filec:\docume~1\user\locals~1\temp\herss.exe to d:\mb9x.ex
- Deletes d:\autorun.in
- Creates d:\autorun.in
- Opens/modifes c:\autoexec.bat
