FinalFantasy 1.01 Beta
(Backdoor.Win32.Hupigon.hemn for Client)
(Backdoor.Win32.Hupigon.bhof)

by Amoeba

Released in March 2008

Made in China

more versions


Server
Dropped File:
c:\WINDOWS\F_Server.exe
Size: 708,096 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FinalFantasy_Service "ImagePath"
Data: C:\WINDOWS\F_Server.exe 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FinalFantasy_Service "ImagePath"
Data: C:\WINDOWS\F_Server.exe 





Tested on Windows XP
May 21, 2008

MegaSecurity