TroDuende 1.0
(Trojan-Spy.Win32.VB.bni for Client)
(Not detected by KAV on April 15, 2009 for Server)

by WarPirata

Released in March 2009 


Server
Dropped Files:
c:\WINDOWS\system32\CLIENTE.exe    Size: 221,184 bytes 
c:\WINDOWS\system32\DIjpg.dll      Size: 94,210 bytes 
	
Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Update"
Data: C:\WINDOWS\SYSTEM32\CLIENTE.exe 


Tested on Windows XP
April 09, 2009
MegaSecurity