Remote-Anything 4.11.12
(not-a-virus:RemoteAdmin.Win32.RA.4117)
(Backdoor.Win32.RA.41112 for Server)

by TWD Industries

Written in Visual C++

Released in November 2003

more versions


server


Server:
dropped files:
c:\ra_slave.log      size: 337 bytes 
c:\WINDOWS\Slave.exe size: 86.258 bytes 

port:3996, 3999, 4000 TCP
 
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "RA Server"
data: C:\WINDOWS\Slave.exe 

server icon is visible in taskbar

MegaSecurity