AMS 1.0.2.1
(Backdoor.Kingos)

by Griffin

Released in september 2002

Written in Visual C++

Made in China

more versions


Servers:
c:\WINDOWS\SYSTEM\msinet.exe 
c:\WINDOWS\SYSTEM\Xdict.exe 

size: 65.536 bytes 

port: 1688, 1689 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Kingsoft" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "msi" 

MegaSecurity