Ducker
(Backdoor.Win32.Ducker)

by ?

Written in Borland C++


Dropped File:
c:\WINDOWS\SYSTEM\SysModule.exe 

size: 77.312 bytes 

port: 3900 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft SysModule " 

MegaSecurity