SB-MSN 1.0
(Constructor.Win32.Agent.eu)
(Backdoor.Win32.Delf.hyu for Server)

by Octalh

Written in Delphi

Released in April 2008




Server
Dropped File:
c:\WINDOWS\SB-MSN.exe
Size: 163,427 bytes 

Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run "wuactl.exe"
Data: C:\WINDOWS\SB-MSN.exe 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MSMSGS"
Data: "C:\Program Files\Messenger\msmsgs.exe" /background 



Tested on Windows XP
April 25, 2008

MegaSecurity