sharK 0.4
(Trojan-PSW.Win32.IcqSmiley.e)
(not-a-virus:PSWTool.Win32.Messen.106)
(not-a-virus:PSWTool.Win32.Dialupass.f)
(Trojan-PSW.Win32.Steam.f)
(Backdoor.Win32.VB.awr for Server)

by sNiper109

Written in Visual Basic

Released in October 2006

more versions

 


Server:
dropped files:
c:\WINDOWS\mswinsck.ocx    Size: 108,336 bytes 
c:\WINDOWS\scvhost.exe     Size: 394,463 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Update"
data: C:\WINDOWS\scvhost.exe 


tested on Windows XP
October 07, 2006
MegaSecurity