by Tataye
Successor of Ulysses
Written in Delphi, compressed with ASPack
Released in January 2003
Made in Rumania
Server:
dropped files:
C:\WINDOWS\SYSTEM\wbem\wsv.com
c:\WINDOWS\SYSTEM\mshost.exe
size: 57.404 bytes
port: 666 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{44AF0969-CC51-11CF-AAFA-06AA00F6115C} "StubPath"
added:
c:\WINDOWS\SYSTEM\kl.tti
MegaSecurity