SpecialTrojan 2.0
(Backdoor.Win32.Pecia.b)

by OnuR

Written in Dev-C++, Source included

Released in September 2007

more versions




Server
Dropped File:
c:\WINDOWS\system32\service.exe
Size: 482,387 bytes 

Port: 4444 TCP

Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools"
Data: 01, 00, 00, 00 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
Data: 01, 00, 00, 00 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Update-Service"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile "EnableFirewall"
Data: 00, 00, 00, 00 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile "EnableFirewall"
Data: 00, 00, 00, 00 




Tested on Windows XP
October 03, 2007

MegaSecurity