Anal FTP 0.1 (b)
(Backdoor.Win32.AnaFTP.01.b)

by Stan

Written in Assembly

Released in September 2002

more versions


Server:
dropped file:
c:\WINDOWS\SYSTEM\SYSio32.exe 

size: 7.680 bytes 

port: 210 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\RegCleaner "StubPath" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "RegCleaner" 
c:\windows\system.ini, [boot] "shell" 

MegaSecurity