Zomby (b)
(Backdoor.Win32.Zomby.b)

by ?

Written in Microsoft Visual C++

more versions


dropped file:
c:\WINDOWS\system32\Kernl32.exe
size: 16,896 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "KRNL"
data: Kernl32.exe 



tested on Windows XP
February 01, 2005

MegaSecurity