Dem0nyc Trojan 1.0
(Backdoor.Win32.VB.bnn for Client)
(Trojan.Win32.VB.dpb for Server)

by Nytro

Written in Visual Basic

Released in September 2007





Server:
Dropped Files:
c:\WINDOWS\need.exe    Size: 16,384 bytes 
c:\WINDOWS\smss.exe    Size: 1,368,064 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "smss.exe"
Data: C:\WINDOWS\smss.exe 


Tested on Windows XP
September 22, 2007

MegaSecurity