Backdoor.Win32.VB.id
(Backdoor.Win32.VB.id)

by ?

Original name is unknown

Written in Visual Basic

more in this category


dropped files:
c:\WINDOWS\system32\alert.wav    Size: 14,864 bytes 
c:\WINDOWS\system32\quick.exe    Size: 294,912 bytes 
c:\WINDOWS\system32\zlib.dll     Size: 53,760 bytes 

port: 5300, 5301, 5302, 5306 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Explorer"
data: C:\WINDOWS\System32\quick.exe 



tested on Windows XP
July 06, 2005

MegaSecurity