CNNSC 1.2
(Trojan-PSW.Win32.OnLineGames.dr)
(Backdoor.Win32.Prosti.ar for Server)

by ?

Released in June 2006

Made in China

more versions 


Server:
Dropped Files:
c:\WINDOWS\system32\cnnsc.dll    Size: 132,096 bytes 
c:\WINDOWS\system32\cnnsc.exe    Size: 160,256 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
old data: Explorer.exe 
new data: Explorer.exe C:\WINDOWS\System32\cnnsc.exe 



tested on Windows XP
September 10, 2007
MegaSecurity