Written in C, compressed with UPX

more versions

dropped file:
c:\WINDOWS\system32\Exp1orer.exe
size: 47,336 bytes 

port: 113 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "Dofiibk"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "DofiibkWftt"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "NUDTbuqbu"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "NUDWhus" 

attempts to connect to an IRC Server



tested on Windows XP
April 04, 2005