HackIT! 2.0
(Backdoor.Win32.Fenster.20)

by Wolff

Written in Delphi, compressed with UPX

Released in November 2000

Made in Germany


Client:
port: 1234 TCP



Server:
c:\WINDOWS\SYSTEM\RundlI32.Exe 

size: 195.584 bytes 

port: 1234 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Rundll32" 

added:
c:\WINDOWS\SYSTEM\Opengl8.dll 

MegaSecurity