Saturday, January 3, 2009

MoneyRat 1.2




ServerDropped File:

c:\WINDOWS\apph.exe

Size: 241,664 bytes

Added to Registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "RUNDLL32"Data: c:\windows\apph Tested on Windows XPJanuary 01, 2009



Tested on Windows XP

January 01, 2009


No comments: