|
by BrutalByte
Written in Delphi
Released in February 2008
|
|
Server
Dropped Files:
c:\WINDOWS\mkhtms.exe Size: 84,671 bytes
c:\WINDOWS\mkhtms.huf Size: 2,100 bytes
Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{51D211D1-21E1-B1A2-E2C1-A3A1214AA1AC} "stubpath"
Data: C:\WINDOWS\mkhtms.exe
tested on Windows XP
May 19, 2008
MegaSecurity