WinRat 1.2
(Backdoor.Win32.Winrat.12 for Client)
(Backdoor.Win32.NetTrash.10.a for Server)

by Cloak

Written in Visual Basic

Released in January 2002

more versions 


Server:
dropped file:
C:\WINDOWS\START MENU\PROGRAMS\STARTUP\STARTUP.EXE

size: 100k

port: 23005, 23006 TCP

startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
C:\WINDOWS\START MENU\PROGRAMS\STARTUP
MegaSecurity