by ?
Written in Microsoft Visual C++
dropped file: c:\WINDOWS\system32\msrexe.exe size: 30.720 bytes port: 7235, 6552, 5978 TCP startup: KEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Swartax "ImagePath" data: C:\WINDOWS\System32\msrexe.exe HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Swartax "ImagePath" data: C:\WINDOWS\System32\msrexe.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System Service" data: C:\WINDOWS\System32\msrexe.exe tested on Windows XP November 28, 2004MegaSecurity