by Red Move
Written in Visual Basic, compressed with UPX
Released in May 2005
Server: dropped file: c:\WINDOWS\system32\Boss.exe size: 12,800 bytes port: 4853 TCP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Boss Server" data: C:\WINDOWS\System32\Boss.exe tested on Windows XP May 29, 2005MegaSecurity