ThunderKiss (c)
(Backdoor.Win32.ThunderKiss.c)

by ?

more versions


dropped file:
c:\WINDOWS\IEXPLORz.EXE
size: 15,872 bytes 

port: 23433 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MSTestNB"
data: C:\WINDOWS\IEXPLORz.EXE 



tested on Windows XP
April 23, 2005

MegaSecurity