by m_reza00
Written in Visual Basic
Released in October 2006
Made in Iran
dropped files: c:\WINDOWS\system32\csmm.exe Size: 40,039 bytes c:\WINDOWS\system32\sxmm.dll Size: 25,088 bytes startup: none HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" old data: Explorer.exe new data: explorer.exe C:\WINDOWS\system32\csmm.exe tested on Windows XP October 13, 2006MegaSecurity