Express 2.01
(Backdoor.Win32.Express.201)

by ?

Written in Delphi

Released in January 2001



Server: c:\WINDOWS\SCANREG.EXE size: 128.512 bytes startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "ScanRegistry" added: c:\WINDOWS\SYSTEM\lwpsm32.dll

MegaSecurity