Whisper (e)
(Backdoor.Win32.Whisper.e)

by ?




more versions


dropped file:
c:\WINDOWS\system\rundll32.exe
size: 22,528 bytes 

port: 113 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows DLL Loader"
data: C:\WINDOWS\system\rundll32.exe 

attempts to connect to an IRC Server

tested on Windows XP
December 16, 2005

MegaSecurity