PS Devil 1.0
(Trojan-PSW.Win32.VB.cm)
(Trojan-Dropper.Win32.Juntador.c)

by s8t8s & LoveR StudEnt

Written in Visual Basic

Released in September 2003

Made in the Middle East

more versions




Server:
dropped file:
c:\WINDOWS\SYSTEM\flash.exe

size: 96.256 bytes 

port: 2526, 2527 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "N Anti-Virus"
data: C:\WINDOWS\SYSTEM\FLASH.exe 

MegaSecurity