The program%%1%% connects to the server:

http://*****lo.ru

where it sends the following request (some of the data may vary):

GET…

Antivirus%%1%% Soft removal, How to get rid of Antivirus Soft, Win32/Nuqel.E

Trojan%%1%%-BNK.Win32.Keylogger.gen is a fake threat detection created by rogue antivirus program.

This Trojan%%1%% spy program is designed to steal confidential user data and remotely manage the victim machine. It is a Windows PE EXE file. It is 470 bytes in size.

Installation

When launched, the Trojan creates the following file:
%AppData%\<name>.exe

<name&gr; is chosen at random from…

In 2008, we wrote about Backdoor%%1%%.Win32.Sinowal , a malicious program we believed to pose a serious threat, as it employed the most advanced, at the time, virus technologies.