W32/Exponny.A Trojan

 Virus Information - W32/Exponny.A Trojan:

W32/Exponny.A is a trojan. The trojan will infect Windows systems. The trojan spreads through KaZaA P2P software.

Upon execution, the trojan drops the following files in Windows System folder.

host.exe
upfolder.txt

It displays a fake error message in Japanese.

The trojan modifies registry at the following location to load itself during each startup.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

It adds the following lines in system.ini file found in Windows folder.

[UPALL]
ID={default email address of affected user}