by sk0r alias Czybik
Written in Visual Basic
Released in February 2007
Made in Germany
Server: dropped files: c:\WINDOWS\system32\sapi.dll Size: 1,331 bytes c:\WINDOWS\system32\winmain.exe Size: 196,658 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" old data: Explorer.exe new data: explorer.exe C:\WINDOWS\system32\winmain.exe tested on Windows XP June 06, 2007MegaSecurity