Backdoor.Win32.VB.cr
(Backdoor.Win32.VB.cr)

by ?

Original name unknown

Written in Visual Basic

Made in Brazil

more in this category


Backdoor.Win32.VB.cr:
size: 200.704 bytes

port: 113 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft Network Control"
c:\windows\win.ini, [windows] "run" 
(C:\WINDOWS\mswin.exe is not created)


added:
c:\WINDOWS\mfx.sys  

remark:
Connects to specified IRC server and joins a channel to listen for commands 

MegaSecurity