Little Witch 4.0 (a)
(Backdoor.Win32.LittleWitch.40.a)

by Axlito

Released in May 2001

Made in Argentina

more versions


Server:
dropped file:
C:\WINDOWS\SYSTEM\RUNDLL.EXE

size: 223.744 bytes

port: 31320 TCP
      31320 UDP

startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

MegaSecurity