FOX Trojan 1.0
(Backdoor.Win32.GF.10)

by FoXxD






dropped files:
c:\WINDOWS\system32\fxsystem32.exe
size: 429,056 bytes 

port: 1506 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "fxsystem32"
data: C:\WINDOWS\System32\fxsystem32.e 



tested on Windows XP
June 05, 2007

MegaSecurity