Mar 15 2008
After Analyzing the script I remembered that these kind of scripts are created by using some Web attckers toolkit like MPack, FirePack, IcePack , WPack or AnnyPack in which just you have to feed some info like payload and place it to compromised webserver or newone. But in this case the it is VIP 2.74 from Chinese Hackers. Latest Version is 2.842.
More on K’LL3r’s analysis here…Chinese hacker script infects TrendMicro