by ?
Written in Delphi
Released in September 2003
Made in China
Client: port: 5328 TCP Server: dropped files: c:\WINDOWS\SYSTEM\iplog.exe c:\WINDOWS\SYSTEM\ipsnow.exe c:\WINDOWS\sk.exe size: 247.887 bytes port: 5328 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "ipSnow" added: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\WinOlaApp "Disable" HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$MegaSecurity