by sNiper109
Written in Visual Basic
Released in April 2007
Server:
dropped file:
c:\WINDOWS\my_server.exe
size: 111,184 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A0D652A0-B0D0-F3D5-FED1-FCCA345C00C0} "StubPath"
data: C:\WINDOWS\my_server.exe
tested on Windows XP
May 02, 2007
MegaSecurity