by ?
Original name is unknown
Written in Visual Basic
Released in January 2005
Dropped files: c:\WINDOWS\system32\cpu.dll Size: 9,728 bytes c:\WINDOWS\system32\jDyqYGpbESF\csrss.exe Size: 147,749 bytes c:\WINDOWS\system32\jDyqYGpbESF\csrss.ini Size: 263 bytes HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load" old data: new data: C:\WINDOWS\System32\jDyqYGpbESF\csrss.exe HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "csrss" data: C:\WINDOWS\System32\jDyqYGpbESF\csrss.exe HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "run" data: C:\WINDOWS\System32\jDyqYGpbESF\csrss.exe attempts to connect to an IRC Server tested on Windows XP June 14, 2005MegaSecurity