Upon execution, the trojan drops the following files;

 nmvb.exe in the root of C: drive, detected as W32/Mutant.Bj.Downloader.Trojan
 bdya.exe in the root of C: drive
 owtk.exe in the root of C: drive
 -1133392630 in the root of C: drive
 d.exe in the root of C: drive
 DNSclient.dll in System folder located under common files.
 BluetoothAuthorizationAgent.exe in Windows System folder, detected as W32/Renos.Bgf.Trojan.
 elonaponidof.bmp in Windows System folder.
 ddos[1].txt in Temporary Internet Files folder, detected as W32/Zlob.Jau.Downloader.Trojan.

The trojan changes the existing desktop wallpaper to the following wallpaper.

The trojan modifies registry at the following location to load itself during each startup;

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\

The trojan connects to some pre-defined websites and downloads other malware.

This trojan first appeared on Mar 27, 2008.

 Other names of W32/Tiny.ALZ Trojan:

This trojan is also known as Trojan-Downloader.Win32.Tiny.alz, Trojan.Downloader.Harnig.ZF.