CiGiCiGi ViP 2.0 [platinium]
(Trojan-PSW.Win32.Agent.ck)

by F”NG”§ KĄD[x]

Written in Delphi

Released in August 2005

Made in Turkey

more versions 


Server:
dropped file:
c:\WINDOWS\Fontview32.exe    Size: 213,504 bytes 
c:\WINDOWS\nbcstat.exe       Size: 15,045 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Fontview"
data: C:\WINDOWS\Fontview32.exe 



tested on Windows XP
August 10, 2006
MegaSecurity