Microsoft Windows 2000 Plug and Play Spreading Bot?

This is somthing i found on one of my computers that was vuln to this exploit. AV has not found this yet so it is most likely new. So disect it and find that bitch botnet!

this is not a bot, this are common files to see your running ports,pass etc bt is not a bot.

i tought it was, system.exe was running over 100 times that usualy meens it is scanning on viruses...

i would say someone is scanning ranges for open ports

There are different variants of the worm, each one connects to different IRC server(s).

If anyone gets anyone them PLEASE upload them here...I would love to analyse one...

yep I got 2 they look to be the same but different exe names, would be sweet if you can decompile it and share it with us so we can have a look at the code. Both exes were compressed with myth so I decompressed them for you. Oh and what i find interesting is that mousebm.exe is detected by my kav but wpa.exe isn't and they look to be the same worm so... have a look dude.

here is the reverse bindshell autohacker

is the exploit this with the pita mod

Leme see if my server is vulnerable to this could become fun if my sister gets the worm then i got some work to do again

I'm waiting for it

apoc_neo what are those viruses you upped? There undetected by KAV.