from the doc: Fwb Dloader Beta uses a different method for bypassing firewalls than most fwb downwloaders Most inject a dll into a process. Well thats kinda hard in vb so i had to improvise How it works. It is attaches to internet explorer as an activex control. Everytime IE and/or explorer.exe is loaded the activex gets loaded aswell, tricking the firewall into thinking IE is downloading the file. So if the file it downloads is missing it will re-download the file everytime IE or explorer.exe is loaded, disabling the need for a startup method :P Its still beta but i hope to add it in CIA, watch this it will be memory resident once you execute it so test it with something harmless!!! Alch3mizt
Trojan Horse.LC [Panda]TrojanDownloader.Win32.VB.wTrojanDownloader.Win32.VB.w [Kaspersky]
fwbdloader.exeserver.exe
Windowssystemfwload.dll