Joke/Bluescreen

Analysis

This program may be dropped by other malware with the intention of scaring the user.

• It adds the following registry:
  
  • key: HKEY_USERS\Software\SysInternals\BlueScreen
  • key: HKEY_USERS\Software\SysInternals\Bluescreen Screen Saver

Recommended Action

FortiGate Systems

• Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the 'Allow Push Update' option.
  FortiClient Systems
  
• Quarantine/delete files that are detected and replace infected files with clean backup copies.