AM Remote 1.1
(Backdoor.Win32.VB.zt)

by GTVU

Written in Visual Basic

Released in January 2005




Server:
dropped file:
c:\WINDOWS\system32\zlib.dll
size: 53,248 bytes 

port: 6116 TCP

startup:
none



tested on Windows XP
January 19, 2005

MegaSecurity