Criminal Rat Beta 1
(HackTool.Win32.Agent.bq for Client)
(Backdoor.Win32.Agent.apy)

by Criminal-Jaspion

Released in July 2007


Server:
dropped file:
c:\msconf.exe
size: 233,515 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Msconfig"
data: C:\msconf.exe 


tested on Windows XP
July 07, 2007

MegaSecurity