Y3K rat 1.5
(Backdoor.Win32.Y3KRat.15.b for Client)
(Backdoor.Win32.Y3KRat.15.a for Server)
(TrojanDropper.Win32.Joiner.n)

by -/Chucky-\- and [Firelarm]

Written in Delphi

Compressed with UPX

Released in January 2001

more versions




Server:
C:\WINDOWS\SYSTEM\Dcomcnofg.exe  

size: 321 KB

port: 5882, 5884, 5888, 5889 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Dcomcnofg" 

MegaSecurity