K-MsnRat 1.0.0
(Backdoor.Win32.VB.avs)

by Kunz

Written in Visual Basic

Released in July 2006


dropped file:
c:\WINDOWS\system32\system.exe
size: 123,013 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "system"
data: C:\WINDOWS\System32\system.exe 




tested on Windows XP
July 07, 2006

MegaSecurity