Backdoor.Win32.VB.ahu
(Backdoor.Win32.VB.ahu)

by ?

Original Filename: WinRun2.exe

Written in Visual Basic

Released in 2005

Probably made in Germany

more in this category


dropped files:
c:\WINDOWS\Winrun.exe
size: 69,632 bytes 

port: 1212 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Kernel"
data: C:\windows\winrun.exe 

	
tested on Windows XP
March 06, 2006

MegaSecurity