Troy 1.0
(Backdoor.Win32.VB.sp)

by xyerclev

Written in Visual Basic

Released in July 2004

Made in Argentina


Server:
dropped file:
c:\WINDOWS\reg32.exe

size: 569.619 bytes
 
port: 1049 TCP

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\system "DisableTaskMgr"

MegaSecurity