HideDoor 1.0
(Backdoor.Win32.NinjaSpy.b for Client)
(Backdoor.Win32.Antilam.20.a for Server)
(Trojan.Win32.Vilsel.kks for CriptWin32.dll)

by Kaju

Released in November 2008

Written in Delphi

Made in Brazil

more versions


Server
Dropped Files:
c:\WINDOWS\inf\InCDsrv.exe          Size: 678,428 bytes 
c:\WINDOWS\system\cmd.exe           Size: 20,992 bytes 
c:\WINDOWS\system32\explorer.dll    Size: 678,428 bytes 

Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "InCDsrv"
Data: C:\WINDOWS\inf\InCDsrv.exe 
	
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "NetWork"
Data: C:\WINDOWS\system\cmd.exe 


Tested on Windowb XP
December 02, 2008

MegaSecurity