Internal name: Estrella

Written in Visual Basic

more in this category

Backdoor.Win32.VB.q:

size: 76.800 bytes

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Win32G" 
Data: c:\windows\command\Scandisk.com 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Win32G" 
Data: c:\windows\system\Kernel32.com 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Win32R" 
Data: c:\windows\Server.com