Long-lived Mouse 1.1

Long-lived Mouse 1.1
(Backdoor.Win32.Delf.afv)
(Backdoor.Win32.Hupigon.fgty)

by ?

Written in Delphi

Released in September 2005

Made in China




Server:
dropped file:
c:\WINDOWS\system32\SERVlCES.EXE
size: 564,744 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run "SVCHOST"
data: C:\WINDOWS\System32\SERVlCES.EXE 



tested on Windows XP
July 05, 2006

MegaSecurity