FirstFantasy Beta 1.4
(Trojan-PSW.Win32.OnLineGames.pkv for Server)

by Amoeba

Released in January 2007

Made in China

more versions


Server
Dropped Files:
c:\WINDOWS\F_Server.dll    Size: 131,584 bytes 
c:\WINDOWS\F_Server.exe    Size: 86,016 bytes  

Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_FIRSTFANTASY_SERVICE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FirstFantasy_Service\Enum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FirstFantasy_Service\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\C
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FIRSTFANTASY_SERVICE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FirstFantasy_Service\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FirstFantasy_Service\Security




Tested on Windows XP
February 28, 2008

MegaSecurity