Last 2000 (a)
(Backdoor.Win32.Last2000.a)

by lovejingtao

Written in C++, compressed with ASPack

Released in November 2000

Made in China

more versions


Server:
dropped file:
C:\WINDOWS\SYSTEM\RUNVXD32.EXE

size: 337,920 bytes

port: 1122, 7788, 1415, 2000 TCP
      1122, 7788 UDP
	  
startup:
c:\windows\system.ini
HKCR\txtfile\shell\open\command

MegaSecurity