Backdoor.Win32.VB.w
(Backdoor.Win32.VB.w)

by ?

Internal Name: script

Written in Visual Basic

more in this category


Dropped files:
c:\WINDOWS\script.exe   size: 102.400 bytes
c:\WINDOWS\syspack.ini 
 
startup:
c:\windows\system.ini, [boot] "shell" 

Can be used for flooding certain IP's
Can scan for IP's infected with Subseven

Tries to connect to a specified IRC server to join a channel and listen for commands

MegaSecurity