Written in Microsoft Visual C++

Released in October 2004

Made in The Netherlands

error box by server

This trojan will be deactivated on December 1, 2004

CrackerJack


Server:
dropped file:
c:\WINDOWS\systray.exe
size: 61.440 bytes

port:  5016 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System"
data: C:\WINDOWS\systray.exe

tested on Windows XP
November 14, 2004