by ?
Written in Delphi
Released in July 2006
Made in China
Server: dropped files: c:\WINDOWS\system32\impai.exe Size: 18,451 bytes c:\WINDOWS\system32\NIW.exe Size: 18,451 bytes startup: HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)" old data: %SystemRoot%\system32\NOTEPAD.EXE %1 new data: C:\WINDOWS\System32\impai.exe "%1" tested on Windows XP August 01, 2006MegaSecurity