by -/SHA\-
Written in Delphi
Server: dropped file: c:\WINDOWS\system32\IEserver.exe size: 810,128 bytes port: 9500 TCP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run "SVCHOST" data: C:\WINDOWS\System32\IEserver.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "IEserver.exe" data: C:\WINDOWS\System32\IEserver.exe tested on Windows XP February 11, 2006MegaSecurity