PaijoaoLogger 1.0
(Backdoor.Win32.Agent.clz)

by Paijoao

Released in October 2007


Server
Dropped Files:
c:\WINDOWS\system32\dos.ico        Size: 13,942 bytes 
c:\WINDOWS\system32\svhosts.exe    Size: 568,832 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "svhosts"
Data: "C:\WINDOWS\system32\svhosts.exe" 



Tested on Windows XP
November 08, 2007

MegaSecurity