Anthena Trojan 4.0
(Backdoor.Vagrnocker.12 for Main.exe)

by Thiago Pires Alves

Written in Delphi

Released in june 2002

Made in Brazil


Server (WinBIOS.exe):
C:\WINDOWS\WinBIOS.exe 

size: 395 KB

port: 12884 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "BIOSAdapter" 



Server (Main.exe):
C:\WINDOWS\Windll.exe 

size: 348 KB

port: 22554 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Windll.exe" 

MegaSecurity