SubSARI 1.0 beta
(Backdoor.Win32.Subsari.10)

by KiPSOFT

Released in April 2000

Made in Turkey

more versions


Server:
C:\WINDOWS\SYSTEM\RUNEXEC.EXE 

size: 162.816 bytes

port: 6711, 3131, 50000 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 

MegaSecurity