QwEErz Downloader 1.2
(Constructor.Win32.Downldr.b)
(Trojan-Downloader.Win32.VB.sk)

by QwEErz

Written in Visual Basic

Released in May 2005

more versions


Server:
dropped files:
c:\WINDOWS\Dons.dll            Size: 0 bytes 
c:\WINDOWS\system\Cops.dll     Size: 0 bytes 
c:\WINDOWS\system\Copse.dll    Size: 0 bytes 
c:\WINDOWS\system\MNGR.EXE     Size: 45,114 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SisMgr"
data: C:\WINDOWS\SYSTEM\MNGR.EXE 

tested on Windows XP
January 21, 2006

MegaSecurity