by Tataye
Written in Delphi
Made in Rumania
dropped files: c:\WINDOWS\bvcl.exe size: 31.487 bytes c:\WINDOWS\msagent\msfsrg.com size: 31.487 bytes port: 1042 TCP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run "bvcl" data: C:\WINDOWS\msagent\msfsrg.com tested on Windows XP January 03, 2005MegaSecurity