Shah 1.0
(Backdoor.Win32.Shah.10.a for Server)
(Backdoor.Win32.Shah.10.b)

by Shaban

Written in Delphi

Released in May 2000

Made in Turkey

more versions


Client:
size: 177 KB


Server:
dropped file:
C:\WINDOWS\.DL1

size: 148 KB

port: 41626

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

MegaSecurity