Backdoor.Win32.IRCBot.adi (imgac157.zip)

[Malekal_morte]

Size: 81,408 bytes
133,120 bytes
MD5 hash: 3cc4dfe64efd52d43fa15d1fc3b86344
ce3fc839a0f34578dbdb854b2713aef5
Detection: 81,408 bytes — Backdoor.Win32.IRCBot.adi (Kaspersky)
133,120 bytes — Backdoor.Win32.IRCBot.adk (Kaspersky)

Ajoute les fichiers :

%Windows%\imgac157.zip (contient "img1851.jpg-www.imagehosting.com")
%Windows%\winpo32.exe

Ajoutes la clef dans le registre :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"Windows Population Logger"="winpo32.exe"

Envoie les messages :

OMG I broken my foot, look!
Is this you?
Accept dis picture homie
Hahahahahahahaha
look @ my new car
Look @ my new house
Did you see this picture of Paris Hilton?
OMG, this picture is so sad :(
Look how cute we look in this picture?
Should I tag you in this picture?
Hey, check out my new picture
Are you going to accept this?
Look at this image!!!
LoL, have you seen this?
Hi, did you see this picture from our summer?