Toppicc Remote Administration Tool Private
(Not detected by KAV on March 11, 2009)

by Toppicc

Released in February 2009


Server
Dropped Files:
c:\WINDOWS\kmsjsx32.sys Size: 0 bytes 
c:\WINDOWS\kmssx32.dll  Size: 1,532 bytes 
c:\WINDOWS\mssrs32.exe  Size: 148,986 bytes 

Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "mssrs32" 
Data: C:\WINDOWS\mssrs32.exe 



	
Tested on Windows XP
March 17, 2009

MegaSecurity