by Fucking Death
Compressed with Petite
Released in November 2004
Made in Brazil
Server:
dropped files:
c:\WINDOWS\system\KEYLOG.DLL size: 46,080 bytes
c:\WINDOWS\system\WF.exe size: 362,917 bytes
port: 42024 TCP
42025 UDP
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinFire"
data: C:\Windows\System\WF.exe
tested on Windows XP
January 22, 2005
MegaSecurity