by ?
Written in Visual Basic
dropped file: c:\WINDOWS\wreg.exe size: 45,056 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "wreg" data: C:\Windows\wreg.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RUNSERVICES "wreg" data: C:\Windows\wreg.exe attempts to connect to an IRC Server tested on Windows XP September 27, 2005MegaSecurity