AsbMay 1.1
(Trojan-Dropper.Win32.ZomJoiner.241 for Server)

by AsbMay

Written in Visual Basic

Released in January 2004

Made in The Middle East

more versions


Server:
dropped files:
c:\WINNT\system32\sk0..exe     Size: 49,152 bytes    
c:\WINNT\system32\sk0.1.OCX    Size: 108,336 bytes 
	
port: 8686 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "task manager"
data: C:\WINNT\system32\sk0..exe 

tested on Windows XP
November 19, 2005

MegaSecurity