A+++
(TrojanSpy.Win32.VB.av)

by BrosTeam

Written in Visual Basic

Released in march 2004





Server:
port: 567 TCP

dropped files:
c:\WINDOWS\A+++.exe    size: 176.128 bytes 
c:\WINDOWS\reml323.dll size: 113 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "ShellOS"

MegaSecurity