Evil VNC 2.0
(Not detected by KAV on September 10, 2008 for Server)

by Bubzuru

Released in July 2007

more versions 





Server
Dropped File:
c:\WINDOWS\serv.exe
Size: 1,437,696 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "W32"
Data: "C:\WINDOWS\serv.exe" 
		
Port: 5900 TCP

Tested on Windows XP
September 10, 2008
MegaSecurity