Written in Visual Basic

more in this category

Backdoor.Win32.VB.jq:
size: 24.576 bytes

added to registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\Advapi32A.exe "(Default)" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SYSTEM