VolkS Bot 1.4
(Backdoor.Win32.IRCBot.xc for EditServer)
(Backdoor.Win32.VB.ayd for Server)

by VolkS

Written in Visual Basic

Released in June 2006

Made in Argentina





Server:
dropped files:
c:\WINDOWS\system32\SCVHOST3.exe    Size: 241,664 bytes 
c:\WINDOWS\system32\VolkSnet.dll    Size: 457,216 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "(Default)"
data: C:\Windows\System32\Scvhost3.exe 




tested on Windows XP
November 26, 2006

MegaSecurity