by [ZnAsH]
Written in Delphi
Released in February 2003
Server:
dropped file:
c:\WINDOWS\SystemReg.exe
size: 810.496 bytes
port: 6051, 31556 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SystemReg"
MegaSecurity