continuously searches for notification windows displayed by various firewall applications and closes them. In this way, the trojan bypasses some security applications by telling them that the user allows this program to connect to various Internet addresses (the list of the firewalls that this trojan tries to trick is: ZoneAlarm, Outpost1, Outpost2, Outpost3, Sygate Personal Firewall Pro, WinRoute, McAfee Personal Firewall);