Additional Details
Once running on the system, this trojan will download a file from the following website:
• http://ymq.a2000150.wrs.mcboo.com/[Removed]
The downloaded file will then be stored as:
• %Windows%\17PHolmes2000150.exe
It will be automatically executed from the infected machine without the users knowledge and will create a registry entry that will reference to the aforementioned location.
This in turn will download and execute another trojan and will further compromise system security.