FuckBot (a)
(Backdoor.Win32.Fubot.a)

by ?

Compressed with PECompact

Released in November 2003

picture shown while infecting




dropped files:
c:\WINDOWS\janey.jpg      size: 9.191 bytes 
c:\WINDOWS\July_2002.zip  size: 43.606 bytes  containing Webcam_2002.scr
c:\WINDOWS\msstatn.exe    size: 44.544 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MsTStart" 
data: C:\WINDOWS\msstatn.exe

does connect to an IRC server and will start there a conversation, trying to spread the bot:
hi :)
how are you?
do u have a pic? this is mine

MegaSecurity