by SantasDad
Released in July 2007
Server
dropped file:
c:\WINDOWS\system32\server.exe
size: 28,262 bytes
added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A9260CCB-B2B6-7B3B-D778-C92DBC5AEE18} "StubPath"
data: C:\WINDOWS\System32\server.exe
tested on Windows XP
August 03, 2007
MegaSecurity