Goweh (c)
(Backdoor.Win32.Goweh.c)

by ?

more versions




dropped file:
%local dir%\internet.exe
size: 23,104 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MicrosoftWindows"
data: %local dir%\internet.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MicrosoftWindows"
data: %local dir%\internet.exe 



tested on Windows XP
December 10, 2005

MegaSecurity