HotEvil 4.0
(Trojan-PSW.Win32.VB.la)

by Dr.SaDa

Written in Visual Basic

Released in July 2007

Made in Morocco





Server
dropped files:
c:\Autoexec.exe           Size: 66,811 bytes 
c:\WINDOWS\msnmsgr.exe    Size: 71,928 bytes 

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\system "DisableTaskMgr"
data: 01, 00, 00, 00 



tested on Windows XP
July 27, 2007

MegaSecurity