SpecialTrojan 5.0
(Backdoor.Win32.SpecTroj.d)
(Backdoor.Win32.SpecTroj.b for Server)

by OnuR

Written in Dev-C++, Source included

Released in November 2007

more versions




Server
Dropped File:
c:\WINDOWS\system32\win32\svchost.exe
Size: 159,783 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Generic Host Process for Win32 Services"


Tested on Windows XP
November 13, 2007

MegaSecurity