by m_reza00
Written in Visual Basic
Released in February 2007
Made in Iran
dropped files: c:\WINDOWS\system32\csmm.exe Size: 42,052 bytes c:\WINDOWS\system32\sxmm.dll Size: 25,088 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" old data: Explorer.exe new data: explorer.exe C:\WINDOWS\system32\csmm.exe tested on Windows XP February 07, 2007MegaSecurity