Released in October 2008

Made in Tunisia

more versions

 

This Rat Is Totally Offred For Gabriela Zeranska


Server
Dropped File:
c:\WINDOWS\system32\svhost.exe
Size: 108,202 bytes 

Added to Registry:
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Windowss\system32 "Start"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winupdate"
Data: C:\WINDOWS\system32\svhost.exe 


Tested on Windows XP
October `13, 2008