SpecialTrojan 4.0
(Backdoor.Win32.SpecTroj.c)

by OnuR

Written in Dev-C++, Source included

Released in October 2007

more versions




Server
Dropped Files:
c:\WINDOWS\system32\win32\svchost.exe
Size: 34,051 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Generic Host Process for Win32 Services"



Tested on Windows XP
November 01, 2007

MegaSecurity