Sh0ck Trojan
(Not detected by KAV on April 08, 2009)

by Sh0ckWave Team

Written in Delphi

Released in January 2008

Made in Brazil




Server
Dropped File:
c:\WINDOWS\system\ .exe
Size: 589,824 bytes 

Port: 1234 TCP

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run " .exe"
Data: C:\Windows\System\ .exe 




Tested on Windows XP
January 25, 2008

MegaSecurity