McFake 0.1.2
(Trojan.Win32.AntiMcAfee.b)

by Thor u Oka

Compressed with UPX

Released in April 2005


Server:
dropped file:
c:\mcagent.exe
size: 252,953 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MCAgentExe"
data: \mcagent.exe start 


tested on Windows XP
August 29, 2005

MegaSecurity