by Red Move
Written in Visual Basic
Released in August 2006
Made in Iran
Server: dropped file: c:\WINDOWS\system32\Mcsng.exe size: 17,220 bytes startup: HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" old data: "%1" %* new data: Mcsng.exe opext "%1" %* tested on Windows XP September 07, 2006MegaSecurity