Sepro (f)
(Backdoor.Win32.Sepro.f)

by ?

Compressed with NEoLite

more versions


port: 113 TCP

registry added:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Service Profiler" 
Data: srvcp.exe 

Connects to a specified IRC server and joins a channel under the  nick "joeblow"

MegaSecurity