Spook 1.2
(Backdoor.Win32.Spookdor.12)

by sforever

Written in Delphi

Released in August 2003

Made in China

more versions




Client:
port: 7821 TCP



Server:
c:\WINDOWS\SYSTEM\svchoest.exe 

size: 210.944 bytes 

port: 7810, 20000 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "Microsoft Windows" 

MegaSecurity