QQrwx
(Trojan-PSW.Win32.QQPass.bx for sm.dll)
(Backdoor.Win32.Delf.rf for QQrwx.exe)

by ?

Written in Delphi

Released in September 2004

Made in China


dropped files:
c:\WINNT\QQrwx.exe size: 161.792 bytes 
c:\WINNT\sm.dll    size: 12.288 bytes
 
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinQQ"
data: C:\WINNT\QQrwx.exe 

tested on Win2000

MegaSecurity