Backdoor.Win32.VB.bu
(Backdoor.Win32.VB.bu)

by ?

Written in Visual Basic

Probably made in Brazil

more in this category


size: 266,240 bytes

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "run"
data: MSDRVX 
	
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsoft Network Control"
data: C:\WINDOWS\msdrvx.exe 	

attempts to connect to an IRC Server located in Brazil


tested on Windows XP
May 17, 2005
MegaSecurity