Hackarmy (h)
(Backdoor.Win32.Hackarmy.h)

by ?

Packed with MoleBox

Released in december 2003

more versions


Dropped file:
c:\WINDOWS\SYSTEM\win32server.exe 

size: 79.360 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Winsock32driver" 

remark:
Connects to specified IRC server and joins a channel to listen for commands 

MegaSecurity