by ?
Written in Delphi
dropped file: c:\WINDOWS\system32\cssrm.exe size: 449,536 bytes port: 47892 TCP startup: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "run" data: C:\WINDOWS\System32\cssrm.exe tested on Windows XP February 20, 2006MegaSecurity