Caznova Key 1.2 Http
(Backdoor.Win32.Cazdoor.12)

by rattajin

Written in Visual Basic

Released in May 2003

Other versions


Server:
dropped file:
c:\WINDOWS\SYSTEM\MSHTTPC.EXE 
 
size: 53.248 bytes 

port: 80 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "MsHttpC" 

dropped files:
c:\WINDOWS\SYSTEM\MSHTTPC.EXE 
c:\WINDOWS\SYSTEM32\MsCaz.dll 

MegaSecurity