by ?
Internal Name: svchost.exe
Written in Visual Basic, packed with PE-Crunch
Backdoor.Win32.VB.x:
size: 527.873 bytes
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "msidxsrv"
registry added:
HKEY_CLASSES_ROOT\TypeLib\{E7BC34A0-BA86-11CF-84B1-CBC2DA68BF6C}
Connects to a specified IRC server and joins a channel.
MegaSecurity