WMFA
(Backdoor.Win32.WMFA)

by ?

Written in Borland C++, source included

Released in January 2002


This program creates a "backdoor" using ICQ. It was tested on ICQ 2001b Version 5.18.


Server:
dropped file:
C:\WINDOWS\WMFAINS.exe 

size: 50 KB

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "WMFAINS" 

MegaSecurity