by [ZnAsH]
Written in Delphi
Released in January 2003
Server:
dropped file:
c:\WINDOWS\SystemReg.exe
size: 786.944 bytes
port: 6051, 31556 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SystemReg"
MegaSecurity