by E.M.I.N.E.M
Written in Visual Basic
Released in June 2007
Made in Romania
Server dropped file: c:\WINDOWS\system32\Svchost32.exe size: 301,841 bytes port: 13699, 8888, 1234 TCP added to registry: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" data: 01, 00, 00, 00 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Server" HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NOD32krn HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NOD32krn HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet001\Services\NOD32krn HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet002\Services\NOD32krn tested on Windows XP June 24, 2007MegaSecurity