DarkLabel 1.0 B1
(Backdoor.Win32.VB.bmx)
(not-a-virus:PSWTool.Win32.MailPassView.130)
(not-a-virus:PSWTool.Win32.Messen.a)
(not-a-virus:PSWTool.Win32.PassView.b)

by dLinSide

Written in Visual Basic

Released in September 2007

more versions





Server:
Dropped File:
c:\WINDOWS\dLin.exe
Size: 131,331 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{098ED3AE-12DD-EA47-B9E1-DCA72562B753} "StubPath"
Data: C:\WINDOWS\dLin.exe 




Tested on Windows XP
September 21, 2007

MegaSecurity