by ?
Written in Delphi
dropped files: c:\WINDOWS\system32\svhost.exe size: 55,498 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "cSystem" data: C:\WINDOWS\System32\svhost.exe tested on Windows XP September 18, 2005MegaSecurity