This trojan purports to be a spyware-removal utility. It drops or tries to download several functional EXE and DLL files to perform its functions. It also creates over a dozen garbage files and registry entries in the Windows and System directories depending on which version of this trojan is run. These files and registry entries are meant to mimic common spyware and adware applications. These garbage files are intended to be "detected" by it as spyware, to compel you to purchase an anti-spyware application.