Whisper (a)
(Backdoor.Win32.Whisper.a)

by ?

Compressed with UPX



more versions


dropped file:
c:\WINDOWS\system\rundll32.exe
size: 20,480 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows DLL Loader"
data: C:\WINDOWS\system\rundll32.exe 

attempts to connect to an IRC Server

tested on Windows XP
June 13, 2005

MegaSecurity