Majesty
(Not detected by KAV on March 10, 2007)

by S?M

Written in Delphi

Released in July 2002

Made in Russia


Server:
c:\WINDOWS\MSORFCE.EXE 

size: 448.512 bytes 

port: 2945 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "dgdfgdfgdfgdfgdf" 

added files:
c:\autorun.inf 
c:\Program Files\Common Files\MSORFCE.EXE 

MegaSecurity