ProxIce 2.0
(Backdoor.Win32.Agent.ns)

by Icingtaupe

Written in ASM, source included

Released in June 2005

Made in France


Server:
dropped files:
c:\WINDOWS\system32\oobe\sysoobe.exe    Size: 9,728 bytes 
c:\WINDOWS\system32\oobe\ws_sk32.dll    Size: 5,632 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Gestionnaire de disques universel"
data: C:\WINDOWS\system32\oobe\sysoobe.exe 
	
	
tested on Windows XP
September

MegaSecurity