1. You will get more pop-ups of fake anti-virus or advertisements or porn pictures.

2. It keeps popping up at regular intervals.

3. Its a .exe file which gets stored in the following path

c:\Docs and settings\<username>\local setings\Application data\

and also in c:\windows\ prefetch.

4. The file name is the combination of letters and alphabets.

For eg: lkjdkjsh44df.exe, uiwofjoda465a.exe

5. You can find the same .exe file in the registry entry.




6. It also creates some unwanted .dll files in the following location.


7. It modifies the host file so that whenever you try to open browser it redirects to some other page mostly porn website. Host file is in C:\Windows\system32\drivers\etc\