by Masoud Azimi
Written in Visual Basic
Released in May 2006
Made in The Middle East
Server: dropped files: c:\WINDOWS\system32\Volume.exe size: 23,655 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run "Media Center Update" data: C:\WINDOWS\System32\Volume.exe tested on Windows XP November 16, 2006, 2006MegaSecurity