MOTD
(Backdoor.Win32.MOTD)

by ?


Dropped file:
C:\WINDOWS\SYSTEM\RPLCSZ.EXE 

size: 206 KB

port: 25885, 25002 TCP
             25002 UDP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices 			 

MegaSecurity