FirstFantasy Beta 1.0
(Trojan-PSW.Win32.OnLineGames.kyu for Client)
(Trojan-PSW.Win32.OnLineGames.jee for Server)
(Backdoor.Win32.Prosti.ft for F_SERVER.DLL)

Released in November 2007

Made in China

more versions 


Server
Dropped Files:
c:\WINDOWS\system32\F_SERVER.DLL    Size: 125,952 bytes 
c:\WINDOWS\system32\F_SERVER.EXE    Size: 176,128 bytes  

Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load"
Old data: 
New data: C:\WINDOWS\System32\F_SERVER.EXE 




Tested on Windows XP
December 27, 2007
MegaSecurity