Wspomagacz 2006 Build 15 Alpha
(Backdoor.Win32.Small.li)

by Wspomagacz

Written in Delphi, compressed with UPX

Released in May 2006

Made in Poland

more versions





Server:
dropped files:
c:\WINDOWS\DivX.exe          Size: 14,968 bytes 
c:\WINDOWS\wspInstall.dll    Size: 2,560 bytes 

port: 60007 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "DivX"
data: C:\WINDOWS\DivX.exe 


tested on Windows XP
May 25, 2006

MegaSecurity