by SMA Soft
Written in Delphi
Released in October 2006
Made in Iran
Server: dropped files: c:\WINDOWS\Troya.log c:\WINDOWS\WinLoaderXP.exe Size: 304,128 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GenericHostXP" data: C:\WINDOWS\WinLoaderXP.exe tested on Windows XP January 23, 2007MegaSecurity