by SPY-4-14
Released in April 2006
Made in Syria
Server: dropped files: c:\WINDOWS\del.cmd Size: 112 bytes c:\WINDOWS\SMSS.exe Size: 237,701 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "task manager" data: C:\windows\SMSS.exe tested on Windows XP July 27, 2006MegaSecurity