Ramtha 1.1
(Backdoor.Jord.11)

by Jordan Hackers Club

Written in Visual Basic

Released in january 2003

Made in Jordan




Server:
c:\Windll.exe 

size: 163.840 bytes

port: 1357, 1981, 2002, 2222, 2444, 3004, 5790, 6666, 7359 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Windll132" 

MegaSecurity