looks like the only reason it was discovered was because one person was suspicious that there may have been a trojan...
I wonder how much longer it would have been in the wild if that novelist hadn't become suspicious?

geez I hate the writers that put spaces in their file names ... svchost.exe and ..svchost.exe or even svchost .exe especially the buggers with the leading spaces..


nice find IknowNot thanks

As a footnote: How many time have we submitted a suspect file, to not see it recognised by any product for better than 6 months.. the oldest in my virus Zoo is 8 months... there are a couple that are not recognised by one or more products for better than a year, symantec and NAI being the worst