AIMVision 1.2
(Backdoor.Win32.AIMVision.12)

by Tako

Written in Visual Basic

Released in May 2002

more versions


Server:
C:\WINDOWS\SYSTEM\WinRunHelp.wrh 
C:\WINDOWS\SYSTEM\win32hlp.exe

size: 46.592 bytes

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run 
HKCR\Windows Runtime Help 4.881.1208\shell\open\command 



Added:
c:\WINDOWS\SYSTEM\WinRunHelp.wrh 

keys:
HKCR\.wrh 
HKCU\Software\VB and VBA Program Settings\Microsoft Visual Basic AddIns\VBDataViewWindow 
HKCR\Windows Runtime Help 4.881.1208\shell\open\command 

MegaSecurity