DarkLabel 1.0 B3
(Backdoor.Win32.VB.box)
(Backdoor.Win32.VB.bph)
(not-a-virus:PSWTool.Win32.MailPassView.130)
(not-a-virus:PSWTool.Win32.Messen.a)
(not-a-virus:PSWTool.Win32.PassView.b)

by dLinSide

Written in Visual Basic

Released in October 2007

more versions 





Server:
Dropped File:
c:\WINDOWS\dLin.exe
Size: 319,863 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E958D4BA-2576-9041-8553-40D09DF13D7D} "StubPath"
Data: C:\WINDOWS\dLin.exe 



Tested on Windows XP
October 23, 2007
MegaSecurity