Incriminati
(Not detected by KAV on November 05, 2006)

by ?

This Game drops a backdoor

Written in Visual Basic

Released in February 2004

Made in Colombia


Game: incriminati.exe 
size: 402.259 bytes

Dropped files:
c:\WINDOWS\SYSTEM\convert.dll     size: 29.184 bytes 
c:\WINDOWS\SYSTEM\incriminati.exe size: 24.576 bytes 
c:\WINDOWS\SYSTEM\ladron.swf      size: 317.261 bytes 
c:\WINDOWS\SYSTEM\ntrlpa.exe      size: 45.056 bytes 

port: 2695 TCP

Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Multimedia\DrawDib "pnpdrvr.drv 1008x566x16(565 0)"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Administrador de tareas"
data: C:\WINDOWS\system32\ntrlpa.exe 

MegaSecurity