Remote Explorer
(Backdoor.Win32.VB.afj)

by Ontarget

Written in Visual Basic

Released in October 2004


Server:
dropped files:
c:\juegos\flashpong.exe                              Size: 28,672 bytes 
c:\juegos\flashpong.swf                              Size: 5,868 bytes 
c:\Program Files\Common Files\System\netevent.exe    Size: 135,168 bytes 

port: 7080, 4509 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Controlador de sucesos de red"
data: C:\program files\Common Files\system\netevent.exe 




tested on Windows XP
July 19, 2006

MegaSecurity