Backdoor.Win32.VB.jp
(Backdoor.Win32.VB.jp)

by ?

Written in Visual Basic

more in this category


dropped files:
c:\WINDOWS\system32\Backdoor.Win32.VB.jp.exe    Size: 227,630 bytes 
c:\WINDOWS\system32\ipcpass.dic                 Size: 500 bytes 
c:\WINDOWS\system32\ipcscan.exe                 Size: 45,056 bytes 
c:\WINDOWS\system32\psexec.exe                  Size: 37,376 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Backdoor.Win32.VB.jp"
data: C:\WINDOWS\System32\Backdoor.Win32.VB.jp.exe 

attempts to connect to an IRC Server

tested on Windows XP
July 14, 2005

MegaSecurity