by sk0r alias Czybik
Written in Visual Basic
Released in October 2006
Made in Germany
Server: dropped file: c:\WINDOWS\system32\winmain.exe size: 131,072 bytes port: 4001 TCP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" old data: Explorer.exe new data: explorer.exe C:\WINDOWS\system32\winmain.exe tested on Windows XP November 02, 2006MegaSecurity