Backdoor.Win32.VB.gi
(Backdoor.Win32.VB.gi)

by Prophet

Written in Visual Basic

more in this category


dropped files:
c:\WINDOWS\SYSTEM\Msoptreg.log    Size: 561 bytes 
c:\WINDOWS\SYSTEM\SysMgr32.exe    Size: 196.608 bytes 

port: 23976 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SysMgr32"
data: C:\WINDOWS\system\SysMgr32.exe 
	
	
	
	
tested on Windows 98
July 05, 2005

MegaSecurity