Written in Visual Basic

Made in China

more in this category

dropped files:
c:\WINNT\Backdoor.VB.nl.exe  size: 245.761 bytes 
c:\WINNT\ToBeKill.List       size: 84 bytes 

port: 82, 85 TCP

startup:
KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Backdoor.VB.nl"
data: C:\WINNT\Backdoor.VB.nl.exe Run:Auto 

does connect to ip 216.239.39.99
	
tested on win2000