My Demise 1.0
(Backdoor.Win32.Demiz)


by [-DoOmTrAiN_KiLLerZ-]

Written in Visual Basic

Released in February 2004 


Server:
dropped files:
c:\WINDOWS\SYSTEM32\spool\lsass.exe    Size: 90.112 bytes 
c:\WINDOWS\SYSTEM32\spool\Bmp2Jpeg.dll 
c:\WINDOWS\SYSTEM32\spool\lsass.exe 
c:\WINDOWS\SYSTEM32\spool\MSWINSCK.OCX 
c:\WINDOWS\SYSTEM32\spool\scrrun.dll 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "lsass.exe"
MegaSecurity