crazytaxi3
(Backdoor.Win32.VB.ea)

by ?

Written in Visual Basic

Released in September 2002

Made in Brazil


size: 331,776 bytes

port: 113 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MS Network Control"
data: C:\WINDOWS\mswin.exe 

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "run"
data: MSWIN 

attempts to connect to an IRC Server


tested on Windows XP
November 22, 2005
MegaSecurity