Symptoms

Removal instructions:

Analyzed By

Technical Description:

    This trojan is a small piece of code prepended usually to cracks that opens Internet Explorer and navigates to http://cracksplanet.com/readexe.html or http://crackdb.com/readexe.html after which the browser is automatically redirected to http://cracksplanet.com respectively http://crackdb.com. This is done to fake visit counters for those pages in order to earn more money for displaying ads on the pages.

    After this the program drops the original program in the temp folder of the current Windows installation and executes it.