by ?
Written in Visual Basic
dropped file: c:\WINDOWS\system32\tcpsvc.exe size: 2,228,224 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "svchost" data: C:\WINDOWS\System32\tcpsvc.exe tested on Windows XP October 21, 2005MegaSecurity