MyTrj 0.6
(Trojan.BAT.Teldoor.b for k.reg)

by ?

Released in August 2005

Made in Poland




dropped files:
c:\WINDOWS\system32\k.reg         Size: 330 bytes 
c:\WINDOWS\system32\server.bat    Size: 270 bytes 
c:\WINDOWS\system32\sp2.bat    Size: 403 bytes 
c:\WINDOWS\system32\ssserver.bat.lnk

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus"
data: C:\WINDOWS\system32\ssserver.bat.lnk 

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List "c:\windows\system32\telnet.exe"
data: c:\windows\system32\telnet.exe:*:Enabled:Microsoft Update Server 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List "c:\windows\system32\telnet.exe"
data: c:\windows\system32\telnet.exe:*:Enabled:Microsoft Update Server 
	
	
tested on Windows XP
September 24 2005

MegaSecurity