Trojaner 2.1
(Backdoor.Fenster.20 for client)
(Backdoor.Fenster.21 for server)

by Wolff

Written in Delphi, compressed with UPX

Released in may 2001

Made in Germany

more versions


Client:
port: 49682 TCP



Server:
c:\WINDOWS\SYSTEM\RundlI32.Exe 

size: 196.096 bytes  

port: 49683 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Rundll32" 


MegaSecurity