Symptoms

Removal instructions:

Analyzed By

Technical Description:

Trojan.Downloader.Vb.OC is a component of another malware , Winks Installer which disguises itself as a a patch for MSN Messenger to add new emoticons.

It downloads updates from these links:

http://monkey.t35.com/winks/org_jap/[REMOVED]
http://monkey.t35.com/winks/org_kor/[REMOVED]
http://monkey.t35.com/winks/org_chi/[REMOVED]
http://monkey.t35.com/winks/org_dut/[REMOVED]

At the time of the analysis the download site is not online anymore.
Newly downloaded updates are handled by Winks Installer.