by ?
Original Filename unknown
Written in Delphi, compressed with UPX
dropped files:
c:\WINDOWS\system32\ntdll32.dll Size: 275,968 bytes
c:\WINDOWS\system32\rml.dll Size: 9,216 bytes
port: 567 TCP
added to registry:
HKEY_CLASSES_ROOT\CLSID\{00000003-0001-0003-0003-000000000007}
tested on Windows XP
August 21, 2005
MegaSecurity