by Sunmatrix
aka Remote File Manager
Written in Visual Basic
Released in March 2002
Server
Dropped File{
C:\WINDOWS\SYSTEM\SERVER.exe
Size: 69.632 bytes
port: 1001 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SERVER"
MegaSecurity