CRShell 1.3
(not-a-virus:RemoteAdmin.Win32.CRShell.10)

by XpyXt

Written in Microsoft Visual C++

Released in February 2004

more versions


Servidor 	1.3 	Microsoft Windows 2000 y Microsoft Windows 2003, Microsoft Windows XP
Cliente 	1.0 	Microsoft Windows [98, ME, 2000, XP, NT, 2003], Linux
Editor 		1.2 	Microsoft Windows [98, ME, 2000, XP, NT, 2003], Linux
+ Modo de instalación debug
+ Funcional con Windows XP (SP1 SP2)
+ Espacio para 2000 bytes de configuracion
= Modo debug
= Funcional con Windows 2003
= Funcional en Windows 2000
= Parámetro de ayuda crshell.exe --help
= Continuas en donde anteriormente te habías quedado en el CMD

XpyXt 
 

Server:
dropped file:
c:\WINNT\system32\server.exe

size: 36.924 bytes

port: 12345 TCP (example}
 
added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BLABLA\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\blabla\Enum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\blabla\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BLABLA\0000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BLABLA\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\blabla\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\blabla\Security

tested on win2000
MegaSecurity