by SantasDad, ripped / modified by La VozR
Server
Dropped file:
c:\WINDOWS\system32\server.exe
Size: 33,384 bytes
Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A9260CCB-B2B6-7B3B-D778-C92DBC5AEE18} "StubPath"
Data: C:\WINDOWS\system32\server.exe
Tested on Windows XP
April 03, 2008
MegaSecurity