Legend 3.97
(Backdoor.VB.aj for go.exe)

by ?

Released in april 2002

Made in China




Server:
c:\WINDOWS\SYSTEM\TASKSET.EXE 
c:\WINDOWS\SYSTEM\TASKMOM.EXE 

size: 125.952 bytes 
 
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "TaskMonitor" 
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" 
HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)" 
HKEY_CLASSES_ROOT\chm.file\shell\open\command "(Default)" 
c:\windows\win.ini, [windows] "run" 


added:
c:\WINDOWS\MSTASKS.EXE 
c:\WINDOWS\SYSTEM\TASKMOM.EXE 
c:\WINDOWS\SYSTEM\TASKSET.EXE 

MegaSecurity