DarkLabel 1.0 B2
(Backdoor.Win32.VB.bnw)
(not-a-virus:PSWTool.Win32.MailPassView.130)
(not-a-virus:PSWTool.Win32.Messen.a)
(not-a-virus:PSWTool.Win32.PassView.b)

by dLinSide

Written in Visual Basic

Released in September 2007

more versions





Server:
Dropped File:
c:\WINDOWS\dLin.exe
Size: 135,543 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{265597FA-7BB4-664C-8298-858D257C66B9} "StubPath"
Data: C:\WINDOWS\dLin.exe 



Tested on Windows XP
October 08, 2007

MegaSecurity