Rejoice 2007 4.4
(Backdoor.Win32.Hupigon.ddsc)
(Backdoor.Win32.Hupigon.evc for Server)

by ?

Written in Delphi

Released in March 2007

Made in China

more versions


Server:
dropped files:
c:\Program Files\Common Files\Microsoft Shared\MSInfo\rejoice44.exe
size: 287,232 bytes 

c:\WINDOWS\system32\_rejoice44.exe
size: 287,232 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows_rejoice2007_44\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\p
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows_rejoice2007_44\Security




tested on Windows XP
March 22, 2007

MegaSecurity