Details on Fake.Wget

[Redocbew]

I've just recently cleaned out an infection of Fake.Wget, but since there doesn't seem to be a whole lot of information available about it(at least that I could find) I'm still kind of curious as to exactly what the bug does. My own picking and poking at it has given a general idea, but the finer details haven't come together yet. My assembly is rusty, and I'd rather not spend the next couple days getting reacquainted with my disassembler if someone in the know could give me the inside scoop on it. :)

[spybotsandra]

Hello,

This is a trojan that is often installed with small "fun programs". In this case there is a small capricorn hopping across the desktop - it is run on each system startup and cannot be closed.

Best regards
Sandra
Team Spybot