Little Witch 6.1 (a) server
(Backdoor.Win32.LittleWitch.61.a)

by Axlito

Written in Delphi

Released in March 2004

Made in Argentina

more versions


Server:
dropped files:
c:\WINDOWS\ini.ini           size: 72 bytes 
c:\WINDOWS\usr.dat           size: 89 bytes 
c:\WINDOWS\SYSTEM\Rundll.exe size: 273.444 bytes 
 
port: 31320 TCP

added to registry:
KEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial"

HKEY_CURRENT_USER\Software\Msn "Date"

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "RunDll"
data: RunDll

MegaSecurity