DXM SMTP Trojan
(Trojan.Win32.Dxmsmtp)

by Hex

Written in Visual Basic

Released in march 2003



Server:
C:\WINDOWS\system\regeditor.exe (not created)

size: 32,768 bytes

port: 666 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "regeditor" 

MegaSecurity