Beast 1.92 (a)
compiled march 01, 2003
(Backdoor.Win32.BeastDoor.192.a for Client)
(Backdoor.Win32.Delf.eu for Server)

by Tataye

See Ulysses

Written in Delphi

Compiled on March 01, 2003

Made in Rumania

more versions




Servers:
c:\WINDOWS\SVCHOST.EXE 
c:\WINDOWS\SYSTEM\COM\mscom32.com 
c:\WINDOWS\SYSTEM\WBEM\wb.com 

size: 122.880 bytes (not compressed)


port: 666 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{45DD0432-AA51-31EF-EEFA-06AA12E6115C} "StubPath" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run "COM Service" 

MegaSecurity