BestPics

This RAT was written in Visual C++. The author is unknown but the place
of origin is probably Germany. The virus can be classified as
non-destructive, and the technique it uses for hiding is one of a kind:
then the victim executes this RAT, it drops three pornographic JPEG
files in the current directory. It also drops one file in the Windows
computer directory. The application is executed each time Windows starts. To
hide its PE/Win32 structure, an MS-DOS Application icon is shown
instead. The interface is written in English. It affects only Windows
operating computers.