Backdoor.Win32.VB.do
(Backdoor.Win32.VB.do)

by ?

Original Filename: Crack for fifa2003 No CD

Written in Visual Basic

more in this category


dropped file:
c:\WINDOWS\system\Backdoor.Win32.VB.do.exe
size: 200.704 bytes 

port: 1223 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Sys32"
data: c:\windows\system\Backdoor.VB.do.exe 

does send a notify by ICQ
 
tested on Windows XP
November 10, 2004

MegaSecurity