Towerman 2007 E
(Trojan-Spy.Win32.Delf.uc)
(Trojan-Dropper.Win32.Agent.bbq)

by ?

Written in Delphi

Released in January 2007

Made in China

more versions

 


Server
dropped files:
c:\WINDOWS\system32\Swz29.dll       Size: 129,536 bytes 
c:\WINDOWS\system32\trkwkssw.dll    Size: 129,536 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\TrkWks


tested on Windows XP
March 13, 2007

MegaSecurity