Angel Downloader 3.0
(Trojan-Downloader.Win32.Losabel.k)
(Worm.Win32.AutoRun.bly)
(Trojan-Dropper.Win32.Mudrop.hk)

by ?

Released in September 2007

Made in China

more versions


Server
Dropped Files:
c:\WINDOWS\system32\1.inf          Size: 87 bytes 
c:\WINDOWS\system32\dream.exe      Size: 25,088 bytes 
c:\WINDOWS\system32\plmmsbl.dll    Size: 457,216 bytes 
c:\autorun.inf                     Size: 87 bytes 
c:\sbl.exe                         Size: 25,088 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run "dream"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run "melove" 


Tested on Windows XP
December 24, 2007

MegaSecurity