by ?
Compressed with PECompact
dropped files: c:\Documents and Settings\%user%\Application Data\Microsoft\q167319.dll (Backdoor.Win32.Sandrador.c) size: 12,800 bytes c:\Documents and Settings\%user%\Application Data\Microsoft\svchost.exe (Backdoor.Win32.Sandrador.c) size: 243,200 bytes c:\Program Files\TezBEE\license.txt size: 4,111 bytes c:\Program Files\TezBEE\SatelliteResolver.exe (Backdoor.Win32.Delf.jf) size: 723,968 bytes c:\Program Files\TezBEE\winsock.dll size: 2,864 bytes c:\WINDOWS\Installer\18100a.msi size: 309,248 bytes c:\WINDOWS\Installer\{DCA3B34A-27E5-4C8E-B174-E19A63032CBD}\PASS.exe size: 10,134 bytes tested on Windows XP February 16, 2006MegaSecurity