by [FAM] Crew
Released in October 2006
Made in China
Server:
dropped files:
c:\WINDOWS\system32\FamDiy.exe
size: 2,573 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E543631E-10ED-DCB9-9876-75432210ED79} "StubPath"
data: C:\WINDOWS\System32\FamDiy.exe
tested on Windows XP
November 17, 2005
MegaSecurity