Win32/Gapz: steps of evolution | WeLiveSecurity
Win32/Gapz has a new technique for code injection and a new VBR infection method. The dropper has many tricks for bypassing detection by security software.
Rostovskaya Oblast Trojan Gapz Aleksandr Matrosov Anton Cherepanov Setwindowlong Win Security Intelligence Team
Source: welivesecurity.com