Caznova IRC Spy 2.5
(Backdoor.Win32.Cazdoor.25)

by rattajin

Written in Visual Basic

Released in November 2003

Other versions


Server:
dropped files:
c:\WINDOWS\SYSTEM\DIjpg.Dll   size: 94.208 bytes 
c:\WINDOWS\SYSTEM\MSIrc2.exe  size: 180.224 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "MSIrc2" 
data: C:\WINDOWS\SYSTEM\MSIrc2.exe

MegaSecurity