HD2004 Build20040405
(Backdoor.Win32.Singu.j)

by ?


Released in April 2004

Made in China


Server:
dropped files:
c:\WINDOWS\svchost.exe             Size: 194,766 bytes 
c:\WINDOWS\system32\FinDriv.dll    Size: 23,552 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "svchost"
data: C:\WINDOWS\svchost.exe 



tested on Windows XP
February 21, 2007

MegaSecurity