QQ Massacre 1.0
(Trojan-PSW.Win32.QQPass.el)

by SForever

Protected with tElock

Released in August 2002

Made in China

more versions


Server:
dropped files:
%local dir%\QQhook.dll    Size: 30,720 bytes 
%local dir%\QQpass.exe    Size: 24,745 bytes 
c:\WINNT\Help\QQZLT.CHI   Size: 24,745 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_QQMASSACRE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QQmassacre
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QQMASSACRE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QQmassacre


tested on Windows 2000
September 09, 2005

MegaSecurity