Not to mention they can reinfect via download and the malware scans the system[1] for:
- putty.exe
- filezilla.exe
- winscp.exe
- mstsc.exe
- mRemoteNG.exe
The malware also has the capabilities to fetch new instructions, so there's no telling what happens when any particular software is detected.
[1] https://securelist.com/blog/research/76147/on-the-strongpity... (linked in the first line of this thread's article)