EtherNal-X 1.0
(Backdoor.Win32.VB.tj)

by BaRoSaNu

Written in Visual Basic

Released in July 2007

Made in Romania


Server
Dropped Files:
c:\WINDOWS\system\Cur.cur       Size: 2,240 bytes 
c:\WINDOWS\system\Update.exe    Size: 303,104 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Updates"
Data: c:\windows\system\Update.exe 
	
	
	
	
Tested on Windows XP
February 14, 2008

MegaSecurity