Net Antrax 1.0.0
(Backdoor.Win32.VB.cp for Juegos 100.exe)

by ?

Written in Visual Basic

Released in November 2002

Made in Brazil

more versions

 


Server


Server:
dropped files:
c:\WINDOWS\ccs.tmp                     size: 37.006 bytes 
c:\WINDOWS\installsd.exe               size: 6.144 bytes 
c:\WINDOWS\SYSTEM32\rundll32a.exe      size: 30.720 bytes 
c:\WINDOWS\SYSTEM32\rundll32a.exe.temp size: 38.121 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Rundll32a"
data: C:\WINDOWS\system32\rundll32a.exe /run 
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Rundll32a\Rundll32a "1"
data: C:\WINDOWS\DESKTOP\NET\JUEGOS 100.exe 
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Rundll32a\Rundll32a "2"
data: C:\WINDOWS\system32\rundll32a.exe 

MegaSecurity