Hirons explorer
(Backdoor.Win32.Agent.pdr)

by Hirons

Written in

Released in August 2008

Made in Poland


Server
Dropped File:
c:\WINDOWS\system32\svhost.exe
Size: 522,240 bytes 

Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "svhost"
Data: C:\WINDOWS\System32\svhost.exe 
	
	

Tested on Windows XP
August 15, 2008

MegaSecurity