Theef 1.1
(Backdoor.Win32.Theef.11)

by tt

more versions


Server:
dropped file:
C:\WINDOWS\SYSTEM\ocxreg.exe 

size: 415 KB

port: 1001 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 

MegaSecurity