Edurne 1.0
(Trojan-Dropper.Win32.Delf.abj)

by edurne

Written in Delphi

Released in June 2007





Server
dropped file:
c:\Documents and Settings\%user%\My Documents\WinUpdate.exe
size: 73,337 bytes 

startup:
KEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "WinUpdate"
data: C:\Documents and Settings\%user%\My Documents\WinUpdate.exe 



tested on Windows XP
July 03, 2007

MegaSecurity