Dosh version d
(Backdoor.Win32.Dosh.d)

by ?

Written in Visual Basic

Made in China

more versions


Dropped file:
c:\windows\wincp.exe 

size: 396 KB

port: 113, 1026, 1028, 1032, 1033, 1035 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 

MegaSecurity