Valdown 0.1 beta
(Trojan-Downloader.Win32.Banload.ciu)
(Trojan.Win32.Genome.urn)

by c4st0r

Written in Visual Basic

Released in May 2007




Server
dropped files:
c:\Documents and Settings\%user%\prueba1.exe    Size: 17,717 bytes 
c:\WINDOWS\system32\explorer.exe                Size: 82,035 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "explorer"
data: c:\windows\system32\explorer.exe 



tested on Windows XP
June 12, 2007

MegaSecurity