Released in August 2005

Made in China

Server:
dropped files:
c:\WINNT\WebCam\Cam.exe       Size: 81,920 bytes 
c:\WINNT\WebCam\cs16.dll      Size: 22,847 bytes 
c:\WINNT\WebCam\cs32.dll      Size: 69,632 bytes 
c:\WINNT\WebCam\handler.dll   Size: 49,152 bytes 
c:\WINNT\WebCam\winrun.reg    Size: 151 bytes 
c:\WINNT\WebCam\winrun.vbs    Size: 114 bytes 

port: 2000 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "winrun"
data: C:\WINNT\WebCam\winrun.vbs  



tested on Windows 2000
August 29, 2005