PsyRAT 1.0
(Backdoor.Win32.Agent.ju)

by Psyphen

Written in Borland C++

Released in May 2005

more versions




Server:
size: 8,192 bytes

port: 9863 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Host"
data: C:\WINDOWS\system32\winhost.ex


tested on Windows XP
May 11, 2005

MegaSecurity