by DG
Written in Delphi
Released in June 2008
Made in China
MegaSecurity
Server Dropped File: c:\WINDOWS\system32\12345.dll Size: 31,232 bytes Added to Registry: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Parameters "ServiceDll" Old data: C:\WINDOWS\System32\qmgr.dll New data: C:\WINDOWS\system32\12345.dll HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters "ServiceDll" Old data: C:\WINDOWS\System32\qmgr.dll New data: C:\WINDOWS\system32\12345.dll Tested on Windows XP August 09, 2008