PWS-JQ is a Trojan that downloads another file from a weblink.

This file was written using the Borland Delphi development tool.

Upon execution, it runs silently, no gui messages appear on the screen.


It tries to copy itself to the location C:\Arquivos de programas\My_Love.exe; this is hardcoded inside. It might work on Brazilian Portugese and/or Spanish operating systems, however, the malware copy function didn't work on an English operating system: no such directory was created.

More information can be found at this McAfee page.