by r@nger
Written in Visual Basic
Released in September 2007
Made in Turkey
Server:
Dropped File:
c:\WINDOWS\system32\type32.EXE
Size: 352,487 bytes
Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools"
Data: 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
Data: 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{Y479C6D0-OTRW-U5GH-S1EE-E0AC10B4E666} "StubPath"
Data: C:\WINDOWS\system32\type32.exe
Tested on Windows XP
October 07, 2007
MegaSecurity