LaMe RAT 1.1
(Backdoor.Win32.Lamerat.a for Client)
(Backdoor.Win32.VB.gen for Server)

by FeraliX

Written in Visual Basic

Released in June 2004

more versions 


Server:
dropped file:
c:\WINNT\system32\service.exe

size: 28.800 bytes
 
port: 7896 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Services"
data: C:\WINNT\system32\service.exe 

tested on Win2000
MegaSecurity