technical details
The virus, which has the spy functionality - intercepting keystrokes (keylogger). The collected information is sent by mail using SMTP.
At startup throws (drops) in the system temporary directory or its component SYSLIB32.DLL size of 2615 bytes.
Upon infection, appends itself to the beginning of the file, change the names of the sections of PE header to digital, in ascending order.
Contains the encrypted string:
Win32.HLLP.Kuku
<<<<< Hey, Lamer! Say "Bye-bye" to your data!>>>>>
Copyright © by Sector