Linghun 2006
(Trojan.Win32.Agent.xg)

by ?

Released in July 2006

Made in China





Server
dropped files:
c:\WINDOWS\system32\del.bat         Size: 78 bytes 
c:\WINDOWS\system32\mscorlib.dll    Size: 53,248 bytes

added to registry: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MicroHQ



tested on Windows XP
February 20, 2007

MegaSecurity