dSocks4 1.0
(Backdoor.Win32.Dsocks.10)

by Drocon

Written in Assembly

Released in May 2003


            dSocks4 v1.0 by Drocon

==================================================
To put it short, dSocks4 is a efficient and stealthy 
socks4 server coded in ASM. I've myself throughly 
tested it without any problems, so you shouldn't 
encounter too much problems.
==================================================
Howto?
Each of the options in the Server Builder:
-> Username - This is the authentication "token" 
   needed to connect to the server, set it to 
   something unique so your socks servers won't 
   get stolen
-> Port - Self Explanatory, it's the port the server 
   starts on
-> Exename - A exe name you choose for the server
-> Reg Key- THe name of the registry Key

Drocon


Server:
Dropped File:
c:\WINDOWS\CSRSS.EXE 

size: 3.072 bytes
 
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Loader" 

MegaSecurity