by Hosein Jamshidi
Written in Visual Basic
Released in August 2006
Made in Iran
Server: dropped file: c:\WINDOWS\iexploer.exe size: 26,682 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" old data: Explorer.exe new data: explorer.exe iexploer.exe tested on Windows XP September 06, 2006MegaSecurity