NastyXP 1.1 Beta 9
(Not detected by KAV on December 15, 2006)

by Blund Coder

Written in Delphi

Released in December 2006

Made in Poland

more versions


Server:
dropped file:
C:\RECYCLER\services.exe
size: 1,069,654 bytes


added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
old data: Explorer.exe 
new data: explorer.exe C:\RECYCLER\services.exe 



tested on Windows XP
December 15, 2006

MegaSecurity