Ptakks 2.13
(Backdoor.Win32.Ptakks.213)

by XAN & QuoVadis

Written in Visual C++

Made in Spain

more versions


Server:
dropped files:
c:\WINDOWS\system32\winzipv32.exe
size: 176,678 bytes 

port: 8012 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Vxd WinZip driver"
data: winzipv32.exe 



tested on Windows XP
March 07, 2005

MegaSecurity