pAdmin HTTP Administration v0.8C
(Backdoor.Win32.Padmin.08)

by pAdmin

Written in Visual Basic, compressed with UPX

Released in 2003



port: 113, 6351 TCP added to registry: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "pAdmin" data: %current dir%\Backdoor.Win32.Padmin.08.EXE HKEY_CURRENT_USER\Software\VB and VBA Program Settings\pAdmin attempts to connect to an IRC Server tested on Windows XP February 28, 2005
MegaSecurity