Cybershock 1.0 private
(P2P-Worm.Win32.Polip.a for config.exe)
(Trojan-Spy.Win32.Small.cw)

by Flex[IP]

Written in Microsoft Visual C++

Made in Russia




Server:
dropped files:
c:\WINDOWS\system32\svcroot.dll    Size: 5,120 bytes 
c:\WINDOWS\system32\svcroot.exe    Size: 13,824 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "load"
data: C:\WINDOWS\System32\svcroot.exe 



tested on Windows XP
June 22, 2007

MegaSecurity