by ?
Compressed with PECompact

dropped files:
c:\Documents and Settings\%user%\Application Data\Microsoft\q167319.dll (Backdoor.Win32.Sandrador.c)
size: 12,800 bytes
c:\Documents and Settings\%user%\Application Data\Microsoft\svchost.exe (Backdoor.Win32.Sandrador.c)
size: 243,200 bytes
c:\Program Files\TezBEE\license.txt
size: 4,111 bytes
c:\Program Files\TezBEE\SatelliteResolver.exe (Backdoor.Win32.Delf.jf)
size: 723,968 bytes
c:\Program Files\TezBEE\winsock.dll
size: 2,864 bytes
c:\WINDOWS\Installer\18100a.msi
size: 309,248 bytes
c:\WINDOWS\Installer\{DCA3B34A-27E5-4C8E-B174-E19A63032CBD}\PASS.exe
size: 10,134 bytes
tested on Windows XP
February 16, 2006
MegaSecurity