Written in Assembler

Released in June 2002

===========================================================
a 3.5kb webdownloader that will download any file from a 
website and execute it.also kills any AV's and firewalls running 
works on win9x/me/nt/2k/xp
;===========================================================
features:
*only 3.5kb packed
*downloads a larger trojan from any web url
*stays resident on the computer killing over 280 av's and firewalls
*restarts with the computer
*if downloaded trojan ever gets deleted it will redownload it again

Instructions
1. extract all files from zip to a folder
2. open up editor.exe **DO NOT CLICK SERVER.EXE!!!!****
3. select the  [...] to browse for server.exe
4. once server is selected press read
5. change the settings to your liking
	a. URL: is the site where your larger trojan is downloaded from
	b. exe: is the name of the file is called after downloading
        c. AVKILL: is the name this file will be called when copied to windir
        d. RegKey: is the startup registry keyname 


Server:
dropped file:
c:\WINDOWS\VPROT32.exe
size: 7,168 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "VirusProt32"




tested on Windows XP
February 05, 2007