by loog
Written in Visual Basic
Released in October 2006
Server: dropped files: c:\WINDOWS\lsass.exe Size: 74,273 bytes c:\WINDOWS\svhost.exe Size: 199,986 bytes c:\WINDOWS\system32\setting.dts Size: 308 bytes c:\WINDOWS\system32\svc host.exe Size: 90,148 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "svhost" data: C:\WINDOWS\svhost.exe tested on Windows XP November 03, 2006