Backdoor.Win32.VB.is
(Backdoor.Win32.VB.is)

by ~DV~

Original file name: happytrojan.exe

Written in Visual Basic

Made in Spain

more in this category


dropped files:
c:\sysnt.dll 
c:\Common Files\command.exe   size: 32.768 bytes 
 
port: 1255 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Currency" 

MegaSecurity