MC
(Backdoor.Win32.Agent.ga)

by LionD8

Compressed with UPX

Released in October 2004

Made in China




dropped files:
c:\WINNT\system32\ckini.ini       Size: 512 bytes 
c:\WINNT\system32\msSevTcp.dll    Size: 28,672 bytes 

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\47
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\48
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MicroCQ



tested on Windows 2000
June 30, 2005

MegaSecurity