by m_reza00
Written in Visual Basic
Released in July 2006
Made in Iran
dropped files: c:\WINDOWS\system32\csmm.exe Size: 36,019 bytes c:\WINDOWS\system32\sxmm.dll Size: 25,088 bytes added to registry: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\system "disableregistrytools" data: 01, 00, 00, 00 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "csmm" data: C:\WINDOWS\system32\csmm.exe tested on Windows XP October 24, 2006MegaSecurity