Sky Rat 1.0
(Backdoor.Win32.SkyRat.10)

by Sky Network Team

Written in Delphi

Released in April 2001

more versions


Server:
dropped file:
C:\WINDOWS\SYSTEM\SERVER.exe.exe 

size: 99 KB

port: 1530 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "Info Plugin" 
HKCU\Software\Mirabilis\ICQ\Agent\Apps\Info Plugin "Path" 
c:\windows\win.ini, [windows] "run" 

MegaSecurity