Armageddon 2.0
(Trojan-Notifier.Win32.EES.a)
(Trojan-Notifier.Win32.EES.a)

by s13az3 & LOM

Written in Delphi

Released in January 2003

more versions




Server:
dropped file:
c:\WINDOWS\msdm.exe 

size: 61.609 bytes

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\RAS Autodial\Control "DisableConnectionQuery" 
HKEY_CURRENT_USER\Software\Microsoft\RAS Autodial\Control "LoginSessionDisable" 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial" 
HKEY_LOCAL_MACHINE\Software\Microsoft\RAS Autodial\Control "DisableConnectionQuery" 
HKEY_LOCAL_MACHINE\Software\Microsoft\RAS Autodial\Control "LoginSessionDisable" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial" 
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Hardware Profiles\Current\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial" 

MegaSecurity