by SantasDad
Released in March 2007
Server:
dropped file:
c:\server.exe
size: 83,456 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{F27D83B8-97D4-86E1-1AC4-1302FC94EABC} "StubPath"
data: c:\server.exe
tested on Windows XP
May 25, 2007
MegaSecurity