Autocrat 1.06.0058
(Backdoor.Win32.Autocrat.d for Server)

By H.B.U

Written in Visual Basic, compressed with PECompact

Released in August 2002

Made China

more versions


Server:
dropped file:
c:\WINDOWS\SYSTEM\wupdmgr32.exe 

size: 100.864 bytes
 
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "Microsoft Windows Update 

added:
c:\WINDOWS\SYSTEM\srvsupp.exe 
c:\WINDOWS\SYSTEM\wsock32l.dll 
c:\WINDOWS\SYSTEM\wsock32p.dll 
c:\WINDOWS\SYSTEM\wsock32s.dll 

MegaSecurity