Evil-X Professional
(Trojan-Dropper.Win32.VB.cw)

by RSVC

Written in Visual Basic

Released in December 2002

more versions




Server:
c:\WINDOWS\SYSTEM\winsyncpro.exe 

size: 47.104 bytes 

port: 6167 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WinsyncPRO" 

MegaSecurity