Servidor (a)
(Backdoor.Win32.Servidor.a)

by ?

Written in Visual Basic

more versions


displayed dialog box

dropped files:
c:\WINNT\system\DllRun.exe (win200)
C:\WINDOWS\System\DllRun.exe (win98)

size: 176.128 bytes 

port: 1441 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinManager" 

added:
win2000:
c:\WINNT\system\DllCount.sys 
c:\WINNT\system\DllRun.exe 

win98:
c:\WINDOWS\SYSTEM\DllCount.sys 
c:\WINDOWS\SYSTEM\DllRun.exe 

MegaSecurity