Written in Assembler, source included

Released in October 2005

Epithalium 2.1, FWB¤ System & Polymorphic Backdoor. ( Exclusively NT / XP )


Server:
dropped file:
c:\WINDOWS\repair\MSConfig.exe
size: 6,656 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MSConfig"
data: C:\WINDOWS\repair\MSConfig.exe 

tested on Windows XP
April 19, 2006