GregStar Trojan 1.0
(Not detected by KAV on June 24, 2005)

by gregstar

Written in Delphi

Released in January 2005

more versions 




dropped file:
c:\Program Files\Internet Explorer\mmsystem.exe
size: 737,792 bytes 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mmsystem"
data: C:\Program Files\Internet Explorer\mmsystem.exe 
		
port: 55555, 21 TCP


tested on Windows XP
April 29, 2005
MegaSecurity