by Darksky
Written in Visual C++
Released in March 2002
Made in China
Servers:
C:\WINDOWS\SYSTEM\notepade.exe
C:\WINDOWS\SYSTEM\KNREL32.exe
C:\WINDOWS\SYSTEM\SysArchive.exe
size: 15.872 bytes
port: 5418, 5419 TCP
5419 UDP
startup:
HKCR\.txt\shell\open\command
HKCR\exefile\shell\open\command
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
MegaSecurity