DownTroj 0.21 Public
(Net-Worm.Win32.Kolab.d)
(Net-Worm.Win32.Kolab.ea for Server)

by iserdo

Released in December 2007

more versions





Server
Dropped File:
c:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Recycle Bin\server.exe
Size: 62,976 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "description"
Data: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Recycle Bin\server.exe 



Tested on Windows XP
December 19, 2007

MegaSecurity