Written in Visual Basic

more in this category

Backdoor.Win32.VB.qm:
size: 262.144 bytes

dropped files:
c:\WINDOWS\system32\regsvr32.dll   size: 262.144 bytes 
c:\WINDOWS\system32\svchost32.exe  size: 262.144 bytes 
c:\WINDOWS\system32\svcloader.exe  size: 20.480 bytes 

startup:
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)"
data: svcloader.exe "%1" %*