Demon-Virus Maker
(Constructor.Win32.VB.bg)
(Not detected by KAV on May 19, 2008 for extracted File)

by Masoud Azimi

Written in Visual Basic

Released in May 2006

Made in The Middle East




Server:
dropped files:
c:\WINDOWS\system32\Volume.exe
size: 23,655 bytes 
	
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run "Media Center Update"
data: C:\WINDOWS\System32\Volume.exe 
	
	
	
tested on Windows XP
November 16, 2006, 2006

MegaSecurity