by W@SyL
Written in Delphi, client is compressed with UPX
Released on June 2003
Made in Poland
server dropper
Server: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "SysTray32" C:\WINDOWS\SYSTEM\systray32c.exe size: 588.800 bytes port: 4545 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "SysTray32" added: c:\WINDOWS\SYSTEM\serv.exe c:\WINDOWS\SYSTEM\sscfg.dat c:\WINDOWS\SYSTEM\sscontact.dat c:\WINDOWS\SYSTEM\ssmsg.dat c:\WINDOWS\SYSTEM\sspodpis.dat c:\WINDOWS\SYSTEM\ssprofile.dat c:\WINDOWS\SYSTEM\SYSTRAY32C.EXEMegaSecurity