Kazaak.002
(Backdoor.Win32.Kazaak.002)

by ?

Written in Delphi






dropped file:
c:\WINDOWS\xdaemon.exe
size: 345,088 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "microsoft xdaemon 2.0"
data: C:\WINDOWS\xdaemon.exe -disable 

Attempts to connect to an IRC Server

tested on Windows XP
January 04, 2006

MegaSecurity