Goweh (a)
(Backdoor.Win32.Goweh.a)

by ?

more versions




dropped file:
c:\WINDOWS\system32\drivers\etc\hosts
size: 1,812 bytes 
	

%local dir%\temp.txt
size: 5,000,068 bytes 	

startup:	
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "UserSystem"	

tested on Windows XP
December 07, 2005

MegaSecurity