Nuclear Uploader 1.0
(Backdoor.Win32.Krepper.a)

by Blacksoulman

Written in Delphi


more versions


Server:
dropped file:
c:\WINDOWS\Vac69
size: 368,160 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Vac69"
data: C:\WINDOWS\Vac69 

Seems to be wrong named by KAV



tested on Windows XP
March 28, 2005

MegaSecurity