Caznova Key 1.2.1

Caznova Key 1.2.1
(Backdoor.Win32.Cazdoor.121)
(Backdoor.Win32.Cazdoor.12 for remove.exe)

by rattajin

Written in Visual Basic

Released in May 2003


Server:
dropped file:
C:\WINDOWS\SYSTEM\MSHTTPC.EXE 
 
size: 57.344 bytes 

port: 80 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "MsHttpC"

MegaSecurity