Compressed with ASPack

Released in August 2002

more versions

Server:
dropped files:
c:\WINDOWS\SYSTEM\AVPscan.exe 
c:\WINDOWS\SYSTEM\RundlI32.exe 

size: 136.192 bytes

port: 138, 33600 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Rundll32" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "Kaspersky Lab" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "LoadPowerProfile" 
c:\windows\win.ini, [windows] "run" 


added to registry:
HKEY_LOCAL_MACHINE\Software\WRQ\IAM\FirewallObjects\IPFilterRules\Rule99