X RAT
(Backdoor.Win32.Rapet)

by Splinter

Written in Visual Basic, compressed with Petite

Released in January 2004

more versions


displayed dialog box by server


Server:
c:\WINDOWS\EXPLORER .exe 

size: 20.400 bytes
 
port: 6712, 6713 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "EXPLORER" 

MegaSecurity