IP Gmailer 1.3
(Constructor.Win32.Agent.bm)
(Constructor.Win32.Agent.fd for Server)

by Benites

Written in Visual Basic

Released in August 2007

Made in Peru

more in this category





Server:
dropped files:
c:\Documents and Settings\%user%\Local Settings\Temp\iexplorer.exe    Size: 173,738 bytes 
c:\WINDOWS\System32winxhost.exe       Size: 24,601 bytes 
c:\WINDOWS\system32\reshost392.exe    Size: 24,601 bytes 
c:\WINDOWS\system32\winxhost.exe      Size: 24,866 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Internet7"
data: C:\WINDOWS\System32\winxhost.exe 



tested on Windows XP
August 18, 2007
MegaSecurity