SharaQQ 4.5
(Trojan.PSW.SharaQQ.45 for ConfigShareQQ.exe)
(Trojan.PSW.SharaQQ.40)

by Just Paradise

Made In China

Released in march 2002

more versions




Server:
C:\WINDOWS\SYSTEM\Rundlll.exe 
C:\WINDOWS\Pal.exe 

size: 52.894 bytes

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Defaults" 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce "Defaults" 
HKCR\txtfile\shell\open\command "(Default)" 

Added:
c:\WINDOWS\SYSTEM\config.dll 
c:\WINDOWS\SYSTEM\Iexplarer.dll 
c:\WINDOWS\SYSTEM\Rundlll.dat 

MegaSecurity