RYSoft 3.6
(Backdoor.Win32.Rysoft.a)

by RY

Written in Borland C++, compressed with UPX

Made in China

more versions





size: 384,000 bytes

port: 1031 UDP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "internet"



tested on Windows 2000
February 17, 2005

MegaSecurity