1. Menonaktifkan pilihan "Super Hidden" di Folder Options.
2. Menginfeksi file EXE dengan penambahan size +/- 40 Kb.
3. Menghalangi instalasi antivirus tertentu, mendisable Registry Editor dan Task Manager.
4. Nilai CRC32 berbeda-beda (mirip teknik virus Rodriguez buatan Spanyol)
5. Menambahkan file [nama acak].sys di Windows\system32\drivers.
6. Mengeset registry sbb:
- Menambah key/value berikut ini:
HKLM\SYSTEM\CurrentControlSet\Services\abp470n5
HKCU\Software\[nama komputer + 3 nomor acak]
- Mengubah key/value berikut ini:
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Author izedApplications\List\"
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Setting\GlobalUserOffline = 0
HKLM\SOFTWARE\Microsoft\Security Center\AntiVirusOverride = dword:00000001
HKLM\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify = dword:00000001
HKLM\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify = dword:00000001
HKLM\SOFTWARE\Microsoft\Security Center\FirewallOverride = dword:00000001