Biodox
(Backdoor.Win32.VB.iin)

by Who!

Written in Visual Basic, Source included

Released in November 2008

Made in Turkey




Server
Dropped Files:
c:\WINDOWS\kmssx32.dll     Size: 1,532 bytes 
c:\WINDOWS\mssrs32.exe     Size: 148,986 bytes 

Startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "mssrs32"
Data: C:\WINDOWS\mssrs32.exe 
	
	

Tested on Windows XP
November 23, 2008

MegaSecurity