Whisper (b)
(Backdoor.Win32.Whisper.b)

by ?

Packed / encrypted with Morphine



more versions


dropped file:
c:\WINDOWS\system\rundll32.exe
size: 23,040 bytes 

port: 113 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows DLL Loader"
data: C:\WINDOWS\system\rundll32.exe 

attempts to connect to an IRC Server

tested on Windows XP
November 27, 2005

MegaSecurity