Backdoor.Win32.VB.he
(Backdoor.Win32.VB.he)

by ?

Original Filename: PornBrowser.exe

Written in Visual Basic

more in this category


size: 32,768 bytes

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Backdoor.Win32.VB.he"

does (try to) connect to a specified IRC server

tested on Windows XP 
February 21, 2006

MegaSecurity