It harvests the email addresses stored in the affected computer in order to send span massively and has rootkit functionalities, which allow it to hide files, processes and Windows Registry entries. It reaches the computer downloaded by Trj/Gagar.CG.

Windows 2003/XP/2000/NT/ME/98/95

Alanchum.NX is a Trojan that sends spam massively. In order to do so, it harvests email addresses stored in the affected computer and hosts them in a certain website.

Additionally, it has rootkit functionalities, which allow it to hide files, processes and Windows Registry entries.

Alanchum.NX reaches the computer downloaded detected by the Trojan detected as Gagar.CG.

Alanchum.NX is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.