PA HAC NG Lan 1.0 Beta2a
(Not detected by KAV on March 05, 2006)

by PA HAC

Written in Delphi

Released in September 2005

Made in Poland

more versions


Server:
dropped file:
c:\WINDOWS\sp2\sp2.exe
size: 692,212 bytes 

port: 19860, 19861, 19862, 19863 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Service Pack 2"
data: C:\windows\sp2\sp2.exe 


tested on Windows XP
October 07, 2005

MegaSecurity