NeoRat 3.0
(Backdoor.Win32.NeoRat.30)

by ?

Compressed with FSG



size: 24,989 bytes

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "IEExtension"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices "IEExtension"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "IEExtension"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "IEExtension" 
HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\IEExtension 


tested on Windows XP
August 10, 2005
	
MegaSecurity