Backdoor.Win32.VB.ii
(Backdoor.Win32.VB.ii)

by [-T.R.H-]

Original Filename: Chronic Hell

Written in Visual Basic

more in this category


added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Data: %local dir%\Backdoor.Win32.VB.ii.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MSMSGS"
data: "C:\Program Files\Messenger\msmsgs.exe" /background 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\system "DisableTaskMgr"


tested on Windows XP 
October 02, 2005

MegaSecurity