Remote Script Bot v2.10

Written in Visual Basic

more in this category

dropped file:
c:\WINDOWS\SYSTEM\msapp.exe
size: 90.112 bytes 

startup:
c:\windows\system.ini, [boot] "shell"
old value: Explorer.exe 
new value: Explorer.exe msapp.exe 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WinApp32"
data: msapp.exe B 

tested on Windows 98
September 19, 2005