Y3K rat 1.1
(Backdoor.Win32.Y3KRat.11)

by -/Chucky-\- and [Firelarm]

Compressed with UPX

Released in June 2000

more versions


Server:
dropped file:
C:\WINDOWS\RundlI.exe 

size: 297 KB

port: 5882, 5888, 5889 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Explorer32" 

MegaSecurity