Slayer616 Reverse Administrator 1.2
(not-a-virus:RemoteAdmin.Win32.VB.o for Client)

by Slayer616

Written in Visual Basic

Released in March 2009

more versions


Server
c:\Documents and Settings\Kobayashi\Local Settings\Temp\klog.dat
Size: 2,589 bytes 

c:\Documents and Settings\Kobayashi\Local Settings\Temp\Melt.bat
Size: 135 bytes 

c:\Documents and Settings\Kobayashi\Local Settings\Temp\svchost.exe
Size: 151,587 bytes 

c:\Documents and Settings\Kobayashi\Local Settings\Temp\zlib.dll
Size: 53,760 bytes 



Added to Regitry:	
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "winlogon"
Data: C:\DOCUME~1\KOBAYA~1\LOCALS~1\Temp\svchost.exe 	



Tested on Windows XP
April 14, 2009

MegaSecurity