aka ghost Troyan, Original Filename: direct x2.exe

Written in Visual Basic

more in this category

dropped files:
c:\WINDOWS\sysnt.dll              Size: 3 bytes 
c:\WINDOWS\COMMAND\command.exe    Size: 57.344 bytes 

port: 157 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Currency"




tested on Windows 98
June 03, 2005