SuperStar 2.0
(Backdoor.Win32.VB.adn for Server)

by SHut

Written in Visual Basic

Released in March 2005

Made in France

more versions




Server:
dropped files:
c:\webcam.ocx                    Size: 26,624 bytes 
c:\WINDOWS\system32\ijl11.dll    Size: 180,224 bytes 
c:\WINDOWS\system32\WinDown.exe  Size: 524,288 bytes 

port: 12000, 26874, 26878, 5555 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "KeyMouse "
data: C:\WINDOWS\system32\WinDown.exe




tested on Windows XP
June 04, 2005

MegaSecurity