Backdoor.Win32.VB.et
(Backdoor.Win32.VB.et)

by ?

Original name unknown

Written in Visual Basic

Released in February 2003

more in this category


Dropped file:
c:\WINDOWS\SYSTEM\winregsrv.exe 

size: 344.064 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "winregsrv" 

added:
c:\WINDOWS\SYSTEM\info 
c:\WINDOWS\SYSTEM\nicklist.txt 
c:\WINDOWS\SYSTEM\updater.exe (Backdoor.Angelfire.c)

MegaSecurity