Caznova Spy IRC 1.2
(Backdoor.Win32.Cazdoor.12)

by rattajin

Written in Visual Basic

Released in September 2003

Other versions


Server:
dropped files:
c:\WINDOWS\SYSTEM\MSIC.EXE 
size: 90.112 bytes 

c:\WINDOWS\SYSTEM\MsIC.txt 
size: 30 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "MsIC"

MegaSecurity