El-Hacker Trojan 1.0.0
(Trojan.Win32.VB.aed)

by UNISH

Written in Visual Basic

Released in December 2006

more versions


Server
dropped file:
c:\WINDOWS\messenger.exe
size: 109,568 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "messenger.exe"
data: C:\WINDOWS\messenger.exe 
	
	

tested on Windows XP
January 22, 2007

MegaSecurity