XControl 3.7
(Backdoor.Win32.Yurist.l)
(Backdoor.Win32.Yurist.k)
(Backdoor.Win32.Yurist.h)
(Backdoor.Win32.Yurist.g)

by F145h

Written in Assembler

Released in 2005

Made in Russia

more versions 


Server:
dropped files:
c:\WINDOWS\system32\xflasett      Size: 5 bytes 
c:\WINDOWS\system32\xflash.exe    Size: 42,496 bytes 

port: 18081 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "xflash"
data: xflash.exe 




tested on Windows XP
January 30, 2007
MegaSecurity