Arranca
(Backdoor.Win32.Arranca)

by ?

Written in Borland C, compressed with UPX



Server:
dropped file:
c:\WINDOWS\repair\crss.exe
size: 257,024 bytes 

attempts to connect to an IRC Server


tested on Windows XP
June 09, 2005 

MegaSecurity