|
by Superchachi
Based on source by Krusty
Written in Visual Basic
Created in November 2002
Made in Germany
|
|
Server:
c:\WINDOWS\winexec32.dli
size: 252.386 bytes
port: 4288 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{MBUBRWF-KRFHC-CPG-QYGW-LRJSCPNSUR} "StubPath"
added:
(files)
c:\WINDOWS\qirqgs.bin
c:\WINDOWS\winstart.bat
(registry)
HKEY_CLASSES_ROOT\.dli\shell\open\command
MegaSecurity