by VicSpy Soft
Released in February 2008
Server Dropped Files: c:\WINDOWS\system32\ftdutil.exe Size: 65,536 bytes c:\WINDOWS\system32\ntvxdc.exe Size: 65,536 bytes c:\WINDOWS\system32\wcsydrv.exe Size: 65,536 bytes c:\WINDOWS\system32\wintgtsv.exe Size: 65,536 bytes Startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "Virtual Java" Data: wintgtsv.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Sys Startup" Data: wintgtsv.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Windows start" Data: explorer.exe wintgtsv.exe Tested on Windows XP February 09, 2008MegaSecurity