by Alchemist
Written in Visual Basic
Released in September 2003
Server: c:\WINDOWS\Csrss.exe size: 128.893 bytes port: 5888 TCP startup: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Runtime Process" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices "Runtime Process" HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run "Runtime Process" HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run "Runtime Process" HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Runtime Process" HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices c:\windows\system.ini, [boot] "shell" c:\windows\win.ini, [windows] "load" c:\windows\win.ini, [windows] "run file added: c:\WINDOWS\SYSTEM\okl.oklMegaSecurity