by dem0nseed
Written in Visual Basic
Released in March 2002
# Release Notes for 03-01: (v1.45 - v1.48)
-- dem0nseed --
+ Cleaned up the code, fixed bugs, cleaned up the interface a little and added support for online
documentation
Server:
dropped file:
c:\WINDOWS\system\REGDLL32.EXE
size: 86,016 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinROOT"
data: c:\windows\system\SYSTEM32.EXE
tested on Windows XP
December 09, 2005
MegaSecurity