Ghost Stolker 1.0 Beta1 v2
(Backdoor.Win32.VB.gen for Server)

by Mobman

Written in Visual Basic, Source included

Released in May 2007

Made in France

Other versions





Server:
dropped file:
c:\WINDOWS\system32.exe
size: 4 bytes 

Added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "registry32"
data: C:\WINDOWS\system32.exe 



Tested on Windows XP
February 05, 2008

MegaSecurity