Kyrgyz Trojan 2.7 v2

Kyrgyz Trojan 2.7 v2
(Backdoor.Win32.Kyrdor.27.e)
(Backdoor.Win32.Kyrdor.27.c for tuner.exe)

by Elektrik

Written in Visual C++

Released in February 2004

Made in Russia


Server
dropped file:
c:\WINDOWS\SYSTEM\syskt.exe 

size: 57.344 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "KTService"

MegaSecurity