Remote WebCam
(Trojan.Win32.VB.zp)

by Troyano

Written in Visual Basic

Released in May 2005


Server





Server:
dropped files:
c:\juegos\oranxlander.exe                           Size: 28,672 bytes 
c:\juegos\oranxlander.swf                           Size: 50,220 bytes 
c:\Program Files\Common Files\System\convert.dll    Size: 29,184 bytes 
c:\Program Files\Common Files\System\logonui.exe    Size: 45,056 bytes 

port: 5555 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Interfaz de usuario de inicio d sesi�n de Windows"
data: C:\program files\Common Files\system\logonui.exe 


Probably related to Ontarget

tested on Windows XP
May 29, 2005

MegaSecurity