BotNet.G

• It deletes the original file from which it was run once it is installed on the computer.

• It prevents scanning tools from running, such as Windows Registry Editor, FileMonitor, etc.
• It terminates its own execution if it detects that a memory dump program is running, such as Procdump.
• It terminates its own execution if it detects that a debugging program is active.

It captures certain information entered or saved by the user, with the corresponding threat to privacy:

• Keystrokes, in order to obtain information for accessing online banking services, passwords and other confidential information.

It affects productivity, preventing tasks from being carried out:

• It turns the computer into a platform for malicious action against remote computers surreptitiously.

It reduces the security level of the computer: