Xploit 1.4.3
(Backdoor.Win32.Xploit.a for messenger.dll)
(Backdoor.Win32.Xploit.b)
(Backdoor.Win32.Xploit.c)
(Backdoor.Win32.Agent.yu for Server)

by My-Self

Released in April 2006

Made in Germany

more versions

 





Server:
dropped files:
c:\WINDOWS\system32\server.dll    Size: 104,448 bytes 
c:\WINDOWS\system32\server.exe    Size: 120,468 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Xploit Server "stubpath"
data: C:\WINDOWS\system32\server.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Xploit Server"
data: C:\WINDOWS\system32\server.exe 
	
	

tested on Windows XP
May 22, 2006
MegaSecurity