Alicia version e
(Backdoor.Win32.Alicia.e)

by ?

Written in Delphi, compressed with UPX

more versions

IRC controlled


size: 532,480 bytes

port: 65421, 8821 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "System Kernel OSX"
data: C:\WINDOWS\DESKTOP\BACKDOOR.ALICIA.E.EXE 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "System Kernel VXD"
data: C:\WINDOWS\DESKTOP\BACKDOOR.ALICIA.E.EXE 


tested on Windows 98
January 06, 2005

MegaSecurity