General
Method of propagation:
• No own spreading routine
Aliases:
• Kaspersky: Packed.Win32.Krap.x
• F-Secure: Packed.Win32.Krap.x
• Eset: Win32/Kryptik.AWF
Platforms / OS:
• Windows 2000
• Windows XP
• Windows 2003
Side effects:
• Drops malicious files
• Registry modification
Files
– %SYSDIR%\sys.dat Furthermore it gets executed after it was fully created. Further investigation pointed out that this file is malware, too. Detected as: BDS/Glecia.A