Helios 2.1
(Backdoor.Win32.Helios.21)

by Helios

Written in Visual Basic

Released on August 9, 2002

Made in Belgium

more versions


Server:
C:\WINDOWS\SYSTEM\SCANSTARTUP.EXE 

size: 132 KB

port: 3737 TCP

startup:
HKLM\Software\Microsoft\Active Setup\Installed Components\NEW-SERVER "StubPath" 
HKLM\Software\Microsoft\Active Setup\Installed Components\SCANSTARTUP "StubPath" 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "NEW-SERVER" 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "SCANSTARTUP" 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "NEW-SERVER" 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "SCANSTARTUP" 

MegaSecurity