Autocrat (f)
(Backdoor.Win32.Autocrat.f)

By H.B.U

Written in Visual Basic

Made China

more versions


dropped file:
c:\WINDOWS\system32\odbc32ms.dat
size: 4,034 bytes 

port: 51357 TCP

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AFD\Parameter "DisableRawSecurity"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AFD\Parameter "DisableRawSecurity" 



tested on Windows XP
October 27, 2005

MegaSecurity