QQtfq
(Backdoor.Win32.VB.rk)
(HackTool.Win32.VB.al)

by ?

Written in Visual Basic

Released in March 2004

Made in China





Server:
dropped file:
c:\WINDOWS\system32\Window.exe
size: 32.768 bytes
 
port: 8210 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Window.exe"
data: Window.exe 

tested on Windows XP

MegaSecurity