WAY 1.0
(Backdoor.Win32.Way.10)

by Phoenix

Compressed with ASPack

Released in January 2001

Made in China

more versions


Client:
port:
1789, 6711, 2222 TCP



Server:
c:\WINDOWS\SYSTEM\Explorer.exe 

size: 166.400 bytes

port: 1111, 1114, 8011 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "(Default)" 

MegaSecurity