Net Invoqer 1.0 modified server
(Backdoor.Win32.VB.wn)

by Diskoded

Written in Visual Basic

Released in September 2004

Made in Costa Rica

more versions




Server:
dropped files:
c:\Documents and Settings\Kobayashi\Desktop\Enter.exe    size: 45.056 bytes 
c:\WINDOWS\system32\winzip32.exe                         size: 45.056 bytes 
 
port: 1285 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinZip"
data: c:\windows\system32\winzip32.exe 

tested on Windows XP

MegaSecurity