Backdoor.Win32.VB.fc
(Backdoor.Win32.VB.fc)

by Wċzerface

Original name unknown

Written in Visual Basic

more in this category


Backdoor.Win32.VB.fc:
dropped file:
c:\WINDOWS\Explorers.exe
size: 167.936 bytes 

port: 515, 525, 535, 545, 555, 565, 900 TCP

startup:
c:\windows\system.ini, [boot] "shell"
Old value: Explorer.exe 
New value: Explorer.exe c:\windows\Explorers.exe 



tested on Windows 98
April 25, 2005

MegaSecurity