CRC32: FF1CB86C
MD5: 2C2BCC51124669D6BF4AF62DC4138716
SHA-1: B5E082AA0052844E1FB7B3C2FA63D94B12EB8308
===================================================
One or more files with the name MJAFM.EXE creates, deletes, copies or moves the following files and folders:
MD5: 2C2BCC51124669D6BF4AF62DC4138716
SHA-1: B5E082AA0052844E1FB7B3C2FA63D94B12EB8308
===================================================
One or more files with the name MJAFM.EXE creates, deletes, copies or moves the following files and folders:
- Deletes c:\docume~1\user\locals~1\temp\herss.exe
- Deletes c:\docume~1\user\locals~1\temp\cvasds0.dll
- Creates c:\docume~1\user\locals~1\temp\cvasds0.dll
- Deletes c:\mjafm.ex
- Copies filec:\docume~1\user\locals~1\temp\herss.exe to c:\mjafm.ex
- Deletes c:\autorun.in
- Creates c:\autorun.in
- Deletes d:\mjafm.ex
- Copies filec:\docume~1\user\locals~1\temp\herss.exe to d:\mjafm.ex
- Deletes d:\autorun.in
- Creates d:\autorun.in
- Deletes c:\docume~1\user\locals~1\temp\am1.rar
- Deletes c:\docume~1\user\locals~1\temp\am.ex
- Deletes c:\86.ex
- Copies filec:\docume~1\user\locals~1\temp\herss.exe to c:\86.ex
- Deletes d:\86.ex
- Copies filec:\docume~1\user\locals~1\temp\herss.exe to d:\86.ex
- Opens/modifes c:\autoexec.bat
- Creates c:\docume~1\user\locals~1\temp\am1.rar
- Deletes c:\docume~1\user\locals~1\temp\am.exe
- Creates c:\docume~1\user\locals~1\temp\am.exe
- Copies filec:\docume~1\user\locals~1\temp\am.exe to c:\docume~1\user\locals~1\temp\herss.exe
- Deletes c:\docume~1\user\locals~1\temp\cvasds1.dll
- Creates c:\docume~1\user\locals~1\temp\cvasds1.dll
