by C)DMP & Kaosł
Written in Microsoft Visual C++
Released in September 2001
Made in Italy
Server: dropped files: c:\WINDOWS\Msatrib.exe size: 204.800 bytes c:\WINDOWS\TEMP\~SRBEZPJ.exe size: 204.800 bytes Port: 7410 TCP added to registry: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Msatrib" data: C:\WINDOWS\Msatrib.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce "~SRBEZPJ" data: C:\WINDOWS\Msatrib.exe /del:C:\WINDOWS\TEMP\~SRBEZPJ.exe tested on Windows 98 November 18, 2004MegaSecurity