Original Filename: Down.exe

Written in Visual Basic

more in this category

dropped files:
c:\WINDOWS\system32\DWNMSNGRAB.EXE
size: 40,960 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "dwnmsngrab"
data: C:\WINDOWS\SYSTEM32\DWNMSNGRAB.EXE 


tested on Windows XP 
February 18, 2006