AnarchoIntruder
(Backdoor.VB.gen for server)

by ?

Written in Visual Basic

Released in December 2002




Server:
dropped file:
c:\WINNT\system32\ANARCHOINTRUDER.EXE
size: 98.304 bytes

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Codeg"
data: C:\WINNT\SYSTEM32\ANARCHOINTRUDER.EXE
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "Begn"
data: C:\WINNT\SYSTEM32\ANARCHOINTRUDER.EXE 
	
tested on Windows 2000 

MegaSecurity