by Tataye
Successor of Ulysses
Written in Delphi, compressed with ASPack
Released in January 2003
Made in Rumania
Server: dropped files: C:\WINDOWS\SYSTEM\wbem\wsv.com c:\WINDOWS\SYSTEM\mshost.exe size: 57.404 bytes port: 666 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{44AF0969-CC51-11CF-AAFA-06AA00F6115C} "StubPath" added: c:\WINDOWS\SYSTEM\kl.ttiMegaSecurity