Retribution 2.6
(Backdoor.Win32.Retribution.26)

by Neo and KB

Written in Visual Basic

Released in September 2002

more versions


Server:
size: 200.704 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "bootlogfile" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "msmsg" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "msmsgr" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Norton antivirus scan" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "office decryptfiles" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "start bat file" 

dropped files:
c:\io.dll 
Size: 26 bytes 
c:\WINDOWS\sprocks.bmp 
Size: 26 bytes 
c:\WINDOWS\SYSTEM\diskf.dll 
Size: 26 bytes 
c:\WINDOWS\SYSTEM\reginf.ret 
Size: 26 bytes 

MegaSecurity