Cult (b)
(Backdoor.Win32.Cult.b)

by ?

Written in Visual C++, packed with FSG


more versions


error box shown by Backdoor.Cult.b

Dropped file:
c:\WINNT\system32\winupdate.exe

size: 13.040 bytes
 
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsoft auto update"
data: winupdate.exe

does (try to) connect to an IRC server

tested on win2000

MegaSecurity