by F145h
Written in Assembler
Released in February 2005
Made in Russia
Client: port: 27573 UDP Server: dropped file: c:\WINNT\system32\xflash.exe size: 9 728 bytes port: 27572 UDP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "xflash" data: xflash.exe tested on Windows 2000 February 18, 2005MegaSecurity