Backdoor.Win32.VB.ax
(Backdoor.Win32.VB.ax)

by ?

Original Filename: autoupd.exe

Written in Visual Basic, compressed with UPX

more in this category


size: 18,944 bytes

port: 113 TCP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "autoupd"
data: %local dir%\autoupd.exe 
	
attempts to connect to an IRC server



	
tested on Windows XP 
March 12, 2005

MegaSecurity