Written in Delphi

Released in January 2006

Made in China

Server:
dropped file:
c:\WINDOWS\HackblanServer.exe
size: 37,518 bytes 

added to registry:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run "HackblanServer.exe"
data: HackblanServer.exe 

HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run "HackblanServer.exe"
data: HackblanServer.exe 

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_WWW.HACKBLAN.COM\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Www.HackBlan.coM
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\C
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WWW.HACKBLAN.COM\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Www.HackBlan.coM




tested on Windows XP
April 11, 2007