WebDownloader
(TrojanDownloader.Win32.Small.qg)

by Blackhole

Released in July 2004

more versions


	 Webdownloader
	---------------

Features
--------
3)Setup EXE size is only 1.9 KB
4)it will uninstall itself after downloading the url and successfully executing
5)No need to present the exes at url at the initial stage,it will check each 5 minutes of that url and
if a valid exe is present ther it will download and execute.
6)registry startup

Working 
-------
Specify the url exe at URL1 text box,and create the Webd exe,after running webd.exe ,it wil lcopy itself
to system32 and run itself and chek for valid exe at url,and if ther present it will download and execute

Enjoy

bye

b1ackh0le


Server:
dropped file:
c:\WINNT\system32\rundl1.exe
size: 1.968 bytes
 
startup;
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "RUN DLL"
data: C:\WINNT\system32\rundl1.exe 

tested on win2000

MegaSecurity