by ?
Written in Delphi
Released in September 2006
Made in China
Server: dropped files: c:\WINDOWS\system32\noruns.reg Size: 152 bytes c:\WINDOWS\system32\svohost.exe Size: 34,868 bytes c:\WINDOWS\system32\winscok.dll Size: 36,352 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SoundMam" data: C:\WINDOWS\System32\svohost.exe tested on Windows XP October 01, 2006MegaSecurity