Red-Spy Server (a)
(Backdoor.Win32.RedSpy.a)

by Spy

Written in Delphi

Made in Poland

more versions




Server:
no dropped file:

port: 2684, 2685 TCP

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Media DDV"
data: %local dir%\Media.exe 



tested on Windows XP
April 03, 2005

MegaSecurity