by ?
Written in Microsoft Visual C++
dropped file: c:\WINNT\system32\msrexe.exe size: 31.744 bytes port: 6820, 6763, 9402 TCP added to registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System Service" data: C:\WINNT\system32\msrexe.exe HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Swartax HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Swartax tested on Windows 2000MegaSecurity