T2009 1.0
(Trojan.Win32.Vilsel.cdr)

by shoock12

Written in Delphi

Released in March 2009

Made in Poland


 
Server
Dropped File:
c:\WINDOWS\calc.exe
Size: 571,392 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Calc Windows"
Data: C:\WINDOWS\calc.exe 
	
	

Tested on Windows XP
March 29, 2009

MegaSecurity