Threadsys 1.4
(Backdoor.Win32.Threadsys.14)

by ?

Written in Visual C++

Probably made in Belgium

more versions




dropped file:
c:\WINDOWS\system\threadsys0.exe
size: 0 bytes 

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "threadsys0"
data: C:\WINDOWS\system\threadsys0.exe

HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\threadsys0

tested on Windows XP
November 24, 2005

MegaSecurity