SubRoot 1.3
(Backdoor.Win32.Subroot.13)

by cloak

Written in Delphi

Released in August 2003

more versions




Server:
c:\WINDOWS\Navw32.exe 

size: 139.264 bytes 

port: 7410 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "Navw32 - 1201" 

MegaSecurity