by s13az3 & LOM
Written in Delphi
Released in January 2003
Server: dropped file: c:\WINDOWS\msdm.exe size: 61.609 bytes added to registry: HKEY_CURRENT_USER\Software\Microsoft\RAS Autodial\Control "DisableConnectionQuery" HKEY_CURRENT_USER\Software\Microsoft\RAS Autodial\Control "LoginSessionDisable" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial" HKEY_LOCAL_MACHINE\Software\Microsoft\RAS Autodial\Control "DisableConnectionQuery" HKEY_LOCAL_MACHINE\Software\Microsoft\RAS Autodial\Control "LoginSessionDisable" HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial" HKEY_LOCAL_MACHINE\System\CurrentControlSet\Hardware Profiles\Current\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial"MegaSecurity