Dancerbot
(Backdoor.Win32.Dancerbot)

by ?

Written in Microsoft Visual C++, compressed with UPX


size: 30.720 bytes

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DancerSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DancerSvc\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\d
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DancerSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DancerSvc\Security


tested on Windows XP
January 03, 2005

MegaSecurity