by sNiper109
Written in Visual Basic
Released in March 2007
Server:
dropped files:
c:\WINDOWS\my_server.exe
size: 137,696 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{ED3FFE00-F54B-C05F-D73E-C100EFF16825} "StubPath"
data: C:\WINDOWS\my_server.exe
tested on Windows XP
March 20, 2007
MegaSecurity