by ?
Real name is unknown
Written in Delphi, compressed with UPX
dropped file: c:\WINDOWS\system32\random.exe size: 90132 bytes folder added: c:\Program Files\QuickPage\Portal startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Quicktlme" data: C:\WINDOWS\System32\random.exe tested on Windows XPMegaSecurity