InCommand 1.7 beta
(Backdoor.Win32.Incommand.17)
(Backdoor.Win32.Incommand.10)

by Stoner and Bogart

Written in Delphi

more versions


Server:
C:\WINDOWS\INCSRV.EXE

size: 305 KB

port: 9400 TCP

startup:
HKLM\SoftWare\Microsoft\Windows\CurrentVersion\run

MegaSecurity