Sepro (b)
(Backdoor.Win32.Sepro.b)

by ?

Written in C

more versions


Backdoor.Win32.Sepro.b:

port: 113 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Service Profiler"
data: srvcp.exe 

attempts to connect to an IRC server

tested on Windows XP
December 10, 2004

MegaSecurity