BiG BeN GG 2.2
(Backdoor.Win32.Buben.22)

by BoBi

Written in Delphi

Released in October 2005

Made in Poland

more versions


Server:
dropped file:
c:\WINDOWS\system32\svchost32.exe
size: 1,089,663 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "svchost32"
data: C:\WINDOWS\system32\svchost32.exe 


	
tested on Windows XP
October 30, 2005

MegaSecurity