by GOTHIC
Written in Delphi
Released in August 2000
Made in Brazil
Server:
dropped file:
C:\WINDOWS\SYSTEM\vbrundll.exe
size: 506.368 bytes
port: 1000, 1001, 2000 TCP
2000 UDP
startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
MegaSecurity