B.F.Evolution 5.3.12
(Backdoor.Win32.HVL-Rat.5312)
(Backdoor.Win32.HVL-Rat.5312.b for Server)

by Lost DaTa

aka Blood Fest Evolution

Written in Visual Basic

Released in June 1999


Server:
size: 391.712 bytes

port: 1095, 1097, 1098, 1099 TCP

startup:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSERVICES
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN

MegaSecurity