STU
(Backdoor.Win32.Youpeer.a)

by ?

Written in Visual C++

Released in November 2005

Made in China


Server:
dropped file:
c:\WINNT\system32\intenat.exe
size: 274,530 bytes 

port: 7788 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "intenat"
data: C:\WINNT\system32\intenat.exe 


tested on Windows 2000
December 9, 2005

MegaSecurity