Written in Microsoft Visual C++

Released in March 2005

Made in China

more versions

Winter Love

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 
                                    


Server:
dropped file:
c:\WINNT\system32\myDll.dll
size: 54,272 bytes 

port: 3333 TCP

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MYSRVSHELL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MySrvShell
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYSRVSHELL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MySrvShell




tested on Windows 2000
May 02, 2005