Omerta 1.0
(Backdoor.Win32.VB.add)

by Splinter

Written in Visual Basic

Released in May 2005

more versions


Server:
dropped files:
c:\WINDOWS\msnmsgr.exe             Size: 455,178 bytes 
c:\WINDOWS\system32\msnmsgr.exe    Size: 455,178 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MSN Messenger"
data: C:\WINDOWS\System3232\msnmsgr.exe / 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MSN Messenger"
data: C:\WINDOWS\System3232\msnmsgr.exe / 



tested on Windows XP
June 03, 2005

MegaSecurity