Mint
(Backdoor.Win32.Mint)

by Physco Clown


Written in Visual Basic


Server:
dropped file:
c:\WINDOWS\SYSTEM\M1NT'S HELL.EXE 

size: 54.784 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Dxexid" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Besn" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices 
HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\Awz 

MegaSecurity