by Gazoonga
Written in Visual Basic
Made in Poland
Server: dropped file: C:\WINDOWS\SYSTEM\MODSYS.EXE size: 124 KB port: 23321 TCP startup: HKCU\Software\Microsoft\Windows\CurrentVersion\Run HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesMegaSecurity