Backdoor.Win32.VB.f
(Backdoor.Win32.VB.f)

by ASWVJ30

Internal name: Godis

Written in Visual Basic

See also Menajeto  from the same author

Probably made in Spain

more in this category


Fake error message by Server

Dropped file:
c:\WINDOWS\SYSTEM\startmsn.exe 

size: 35.328 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "StartWindows" 

added:
c:\WINDOWS\SYSTEM\Servet.exe 
c:\WINDOWS\SYSTEM\startmsn.exe 

MegaSecurity