RYSoft (b) Server
(Backdoor.Win32.Rysoft.b)

by RY

Written in Borland C++

Made in China

more versions 





startup:
c:\WINDOWS\system32\Backdoor.Win32.Rysoft.b.EXE
size: 535,657 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "internet"
data: C:\WINDOWS\System32\Backdoor.Win32.Rysoft.b.EXE 



tested on Windows XP
February 13, 2006
MegaSecurity