UAY
(Trojan-Spy.Win32.Fakeuinit.a)

by uty@uaty

Written in Microsoft Visual C++

Released in January 2006

 
Usage:
uay.exe port		specify the port to listen.  eg: uay.exe 12345
uay.exe -u			uninstAll

Note:
defAult port is 9929,And do not chose A port AlreAdy been using



dropped files:
c:\WINDOWS\system32\u_uay_woAini.exe
size: 22,016 bytes 
	
c:\WINDOWS\system32\userinit.exe
old size: 22,016 bytes 
new size: 128,512 bytes 

c:\WINDOWS\system32\dllcache\userinit.exe
old size: 22,016 bytes 
new size: 128,512 bytes 



tested on Windows XP
April 10, 2006

MegaSecurity