H2000
(Backdoor.Win32.Mnets)

by ?

Compressed with ASPack

Released in September 2000

Made in China


Client:
port: 2222, 4444 TCP



Server:
c:\WINNT\system32\Scanregw.exe 
Size: 338.432 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ScanRegistry" 
HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)" 

added files:
c:\WINNT\system32\Win32vxd.exe 
c:\Quak3.txt 

MegaSecurity