LokiTech 1.0
(Backdoor.Win32.VB.na)

by Loki

Written in Visual Basic

Released in August 2003





Server:
dropped file:
c:\WINNT\Ms-grt32.EXE 

size: 426.166 bytes

port: 1717, 1727, 737, 787, 2000 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Ms-Grt32"

MegaSecurity