ValV-N.e.T. 2.0b1
(Backdoor.Win32.Valvoline)
(Backdoor.Win32.NetBus.170)
(TrojanDropper.Win32.Joiner.b)

by Valvoline






Server:
C:\WINDOWS\SERVER.EXE 
C:\WINDOWS\KeyHook.dll 

size: 312 KB

port: 12345, 12346 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 

MegaSecurity