DeCoDeuR 1.00
(Client is infected with Virus.Win32.Hidrag.a)
(Trojan-Dropper.Win32.VB.lk for Server)
(Backdoor.Win32.VB.ktj for Sestem.exe)

by DeCoDeuR

Written in Visual Basic

Released in December 2006


Server: dropped files: c:\Documents and Settings\%user%\Local Settings\Temp\nlvqmsxpp.exe Size: 139,776 bytes c:\Documents and Settings\%user%\Local Settings\Temp\IXP000.TMP\Sestem.exe Size: 110,592 bytes tested on Windows XP July 05, 2007

MegaSecurity