by Xiao5
Released in June 2003
Written in Visual Basic, compressed with ASPack
Made in China
Dropped Files: c:\WINDOWS\SYSTEM\Exp1orer.exe c:\WINDOWS\SYSTEM\Internet.exe c:\WINDOWS\SYSTEM\N0TEPAD.exe c:\WINDOWS\SYSTEM\SystemTray.exe size: 78.848 bytes port: 7744 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Internet" HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SystemTray" HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)" platform: Windows95/98/Me/2000/XPMegaSecurity