MSN Never Online
(Trojan-Downloader.Win32.VB.bqy)

by Mr. X

aka "Leuk Spel"

Written in Visual Basic

Released in November 2005

Made in The Netherlands





Dropped File:
c:\WINDOWS\system32\windIl.exe
Size: 5,012 bytes 

Startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MMNO2"
Data: C:\WINDOWS\system32\windIl 
	
	

Tested on Windows XP
August 11, 2008

MegaSecurity