Original name unknown

Written in Visual Basic, compressed with Petite

more in this category

Backdoor.Win32.VB.cy:
dropped file:
c:\WINDOWS\winsetup.ini
size: 78 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MS Office Toolbar"
data: C:\WINDOWS\System32\wininf.exe 


tested on Windows XP
May 05, 2005