Intedac
(Backdoor.Win32.Intedac)

by ?

aka "Internet Dynamic Network Detector"

Written in Microsoft Visual C++



dropped file:
c:\WINDOWS\MCRSS7.exe
size: 163,840 bytes 

port: 1051 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Internet Dynamic Network Detector"
data: C:\WINDOWS\MCRSS7.exe 


tested on Windows XP
October 06, 2005

MegaSecurity