by ?
Written in Delphi, compressed with ASPack
Made in Bulgaria (?)
Dropped files: c:\WINDOWS\n8xx_16.dll Size: 23 bytes c:\WINDOWS\n8xx_32.dll Size: 44 bytes c:\WINDOWS\regscan.exe Size: 294,400 bytes startup: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "RegScan" data: c:\windows\regscan.exe tested on Windows XP December 23, 2005MegaSecurity