This is a potentially unwanted program (PUP). It is a Windows PE EXE file. It is 32768 bytes in size. It is packed using PECompact. The unpacked file is approximately 192KB in size.
Process
The program is designed to redirect network traffic. When launching, the Trojan causes the following message to be displayed:
In order to activate the different modes, the program has to be launched with the following parameters:
* listen – redirects traffic from one local port to another;
* tran – redirect traffic from a local port to a port on a designated remote host;
* slave – query the remote host and redirect return traffic to a different remote host
Removal
If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:
1. Use Task Manager to terminate the malicious process.
2. Delete the original program file (the location will depend on how the program originally penetrated the victim machine).
3. Update your antivirus databases and perform a full scan of the computer.
____________________
















































