DarkLabel 1.0 B2 Modified
(Backdoor.Win32.VB.bnw)
(not-a-virus:PSWTool.Win32.MailPassView.130)
(not-a-virus:PSWTool.Win32.Messen.a)
(not-a-virus:PSWTool.Win32.PassView.bj)
(Backdoor.Win32.Bifrose.ammh for Server)

by dLinSide, modified by HazloOh

Written in Visual Basic

Released in February 2009

more versions 





Server:
Dropped File:
c:\WINDOWS\dLin.exe 
Size: 188,791 bytes  

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{01AFE8AA-A81A-BE42-B461-5BEF70F82A23} "StubPath" 
Data: C:\WINDOWS\dLin.exe 



Tested on Windows XP
February 27, 2009
MegaSecurity