by Axlito
Written in Delphi
Released November, 2002
Made in Argentina
Client:
port: 6711, 31339 TCP
Server:
dropped file:
c:\WINDOWS\SYSTEM\Rundll.exe
size: 40.024 bytes
port: 31320 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "Rundll"
added:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial"
MegaSecurity