by Tataye
Successor of Ulysses
Written in Delphi
Released in March 2003
Made in Rumania
Server:
dropped file:
C:\WINDOWS\SYSTEM\wbem\wb.com
size: 52.736 bytes
port: 666 TCP
startup:HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{45DD0432-AA51-31EF-EEFA-06AA12E6115C} "StubPath"
added:
c:\WINDOWS\SYSTEM\kl.dli
deleted:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
MegaSecurity