Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WinExec' = '%WINDIR%\WinExec.exe'
Modifies file system :
Creates the following files:
- %WINDIR%\files\Win2k_reboot_exploit.exe
- %WINDIR%\files\IIS_ShellBind.exe
- %WINDIR%\files\WinZip_KeyGen.exe
- %WINDIR%\files\XP_keygen.exe
- %WINDIR%\files\PS2_emulator_bleem.exe
- %WINDIR%\files\win2k_pass_decryptor.exe
- %WINDIR%\files\Counter Strike_CD_Keygen.exe
- %WINDIR%\files\Hotmail Hacker.exe
- %WINDIR%\files\ICQ_Hackingtools.exe
- %WINDIR%\files\invisible_IP.exe
- %WINDIR%\files\Delphi 2005 Keygen.exe
- %WINDIR%\files\Delphi 9 Keygen.exe
- %WINDIR%\files\Half_life Cd keygen.exe
- %WINDIR%\files\ftp_crack.exe
- %WINDIR%\files\hotmail_account_sniffer.exe
- %WINDIR%\files\aim_hack.exe
- %WINDIR%\files\msn_crack.exe
- %WINDIR%\WinExec.exe
- %WINDIR%\files\hotmail_hacker.exe
- %WINDIR%\files\hotmail_cracker.exe
- %WINDIR%\files\icq_hack.exe
- %WINDIR%\files\Delphi 7 Crack.exe
- %WINDIR%\files\win2k_serial_gen.exe
- %WINDIR%\files\yahoo_hack.exe
- %WINDIR%\files\WarDialer.exe
- %WINDIR%\files\Delphi 6 - Serial Gen.exe
- %WINDIR%\files\WinxpHack.exe
