URCS 1.0.5 build 2
(Backdoor.Win32.URCS.105)

by Aaron

Written in C++, source included

Released in January 2003

Made in Venezuela

more versions


Client:
ctool2.exe:

size: 40.960 bytes

port: 1980 TCP

startup:
none



Server:
urcs.exe (invisible) 

size: 229.376 bytes (unpacked)

port: 3359 TCP

startup:
none




Installer: installer.exe 

server:
c:\WINDOWS\rms.exe 

size: 229.376 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "URCS" 

added:
c:\WINDOWS\client.exe 
c:\WINDOWS\ctool2.exe 
c:\WINDOWS\rms.exe 
c:\WINDOWS\urcs.ini 
c:\WINDOWS\urcs.log 


MegaSecurity