RFM 1.3
(Backdoor.Win32.VB.dq)

by Sunmatrix

aka Remote File Manager

Written in Visual Basic

Released in March 2002


Server
Dropped File{
C:\WINDOWS\SYSTEM\SERVER.exe 
Size: 69.632 bytes

port: 1001 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SERVER" 

MegaSecurity