Beast 2.02(b) server
(Backdoor.Win32.Beastdoor.202.b)

by Tataye

Written in Delphi

Made in Rumania

more versions


Server:
dropped file:
c:\WINDOWS\COMMAND\msassh.com 

size: 75.830 bytes 

port: 6666 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "COM Service" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "COM Service" 

added:
c:\WINDOWS\SYSTEM\dxdgns.dll 
c:\WINDOWS\SYSTEM\mspgmj 
c:\WINDOWS\SYSTEM\mspgmj.com 

MegaSecurity