QwEErz Downloader 2.0
(Trojan.Win32.Genome.afkj)
(Trojan-Downloader.Win32.VB.ee)

by QwEErz

Written in Visual Basic

Released in December 2005

more versions


Server:
dropped files:
c:\WINDOWS\Dons.dll            Size: 0 bytes 
c:\WINDOWS\system\Cops.dll     Size: 0 bytes 
c:\WINDOWS\system\Copse.dll    Size: 0 bytes 
c:\WINDOWS\system\explorer.exe Size: 32,823 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SisMgr" 
data: C:\WINDOWS\SYSTEM\explorer.exe 




tested on Windows XP
December 15, 2006

MegaSecurity