W.S.T
(Trojan.Win32.Genome.xss)
(Trojan-Spy.Win32.Agent.jn)

by ?

Released in October 2006

Made in China


Server
dropped file:
c:\WINDOWS\system32\ShellExt\svchs0t.exe
size: 30,096 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "rundll32"


tested on Windows XP
July 11, 2007

MegaSecurity