Symptoms

Removal instructions:

Analyzed By

Technical Description:

      The malware spreads through links in unsolicited/spam e-mail messages, where the user is tricked that he will see explicit videos with celebrities like Angelina Jolie. When clicking the link, the malware will be downloaded and run on the computer.
     Once executed, the file copies itself to the system directory (usually c:\windows\system32) as CbEvtSvc.exe and registers itself as a service with the same name that will be automatically started at every system reboot.
In addition, it will connect to a specific server in order to download and execute some other malicious files.