by ?
Written in Delphi
Released in July 2008
Made in China
Server Dropped Files: c:\WINDOWS\system32\System64.dll Size: 161,280 bytes c:\WINDOWS\system32\System64.exe Size: 264,704 bytes Added to Registry: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer "ImagePath" Data: %SystemRoot%\system32\svchost.exe -k netservice HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer "ImagePath" Data: %SystemRoot%\system32\svchost.exe -k netservice HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer\Parameters "ServiceDll" Data: C:\WINDOWS\system32\System64.dll HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer\Parameters "ServiceDll" Data: C:\WINDOWS\system32\System64.dll Tested on Windows XP 2008, September 03, 2008MegaSecurity