Destruction Gate 1.7
(Backdoor.Win32.VB.qp)
(Trojan-Dropper.Win32.Juntador.c)

by Remsis

Written in Visual Basic

Released in March 2003

more versions


Server:
dropped files:
c:\WINDOWS\msdm.exe    Size: 61,710 bytes 
c:\WINDOWS\msf.exe    Size: 61,710 bytes 
c:\WINDOWS\system\dll.EXE         Size: 796,672 bytes 
c:\WINDOWS\system\MSVBVM60.DLL    Size: 1,388,544 bytes 
c:\WINDOWS\system\MSWINSCK.OCX    Size: 108,336 bytes 
c:\WINDOWS\system\SYSINFO.OCX     Size: 67,376 bytes 
c:\WINDOWS\system\winflash.exe    Size: 90,112 bytes 
c:\WINDOWS\Temp\kill.exe          Size: 61,710 bytes 

startup:
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)"
old data: "%1" %* 
new data: c:\windows\msf.exe PASS "%1" %* 



tested on Windows XP
August 08, 2006

MegaSecurity