by m_reza00
Released in September 2007
Made in Iran
dropped files:
c:\WINDOWS\system32\csmm.exe
Size: 16,950 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
Old data: Explorer.exe
New data: explorer.exe C:\WINDOWS\system32\csmm.exe
Link:
ليست هناك تعليقات:
إرسال تعليق