Original Filename: dabot.exe

Written in Visual Basic

more in this category

dropped file:
c:\WINDOWS\csrss.exe
size: 278,528 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Critical Update Scheduler"
data: C:\WINDOWS\csrss.exe 

attempts to connect to an IRC Server
	
tested on Windows XP
January 03, 2006