more versions

 

Server
Dropped Files:
c:\WINDOWS\system32\System64.exe 
Size: 91,648 bytes 



Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DRATSer "ImagePath" 
Data: C:\WINDOWS\system32\System64.exe 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DRATSer "ImagePath" 
Data: C:\WINDOWS\system32\System64.exe 

	
	

Tested on Windows XP
February 21, 2009