Mini spy 1.00.0006
(Backdoor.Win32.VB.iy)

by Exhumed

Written in Visual Basic, compressed with ASPack

Released in July 2003

more versions


Server:
c:\WINDOWS\SYSTEM\symantec.exe 

size: 173.841 bytes

port: 123, 4563 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Symantec" 

added:
c:\WINDOWS\SYSTEM\cat.dll 

MegaSecurity