by SNiPER
Written in Visual Basic, compressed with UPX
Released in June 2004
Made in Germany
Server: dropped file: c:\WINDOWS\windoof.exe size: 59.431 bytes port: 1212, 1213, 1214, 1215 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WinLogonApplication" HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "WinLogonApplication"MegaSecurity