by CrazyAngel_6bb
Written in Visual Basic
Made in The Middle East
Server: dropped file: c:\WINDOWS\system\Explore.exe size: 51,087 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" old data: Explorer.exe new data: C:\WINDOWS\system\Explore.exe -StartWindows tested on Windows XP August 12, 2006MegaSecurity