Winter Love 3.0
(Backdoor.WinterLove.b)
(Backdoor.WinterLove.c)

by plunix

Written in Microsoft Visual C++

Released in May 2005

Made in China

more versions


Winter Love

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 
                                    


Server:
dropped file:
c:\WINNT\system32\myDll.dll
size: 22,528 bytes 

startup:
KEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load"




tested on Windows 2000
May 25, 2005

MegaSecurity