Compressed with PECompact

Made in Korea (?)

more versions

dropped files:
c:\WINDOWS\system32\iyus.dll             Size: 241,664 bytes 
c:\WINDOWS\system32\xtempx.xxx           Size: 0 bytes 
c:\WINDOWS\system32\iyus\kaommkpi.exe    Size: 80,896 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "iyus"
data: C:\WINDOWS\System32\iyus\kaommkpi.exe 
	
	
This backdoor is related to the site:
www.utility-carfax.com 


tested on Windows XP
November 07, 2005