Beast (b) server
(Backdoor.Win32.Beastdoor.b)

by Tataye

Written in Delphi

Made in Rumania

more versions




dropped files:
c:\WINDOWS\bvcl.exe            size: 31.487 bytes 
c:\WINDOWS\msagent\msfsrg.com  size: 31.487 bytes 

port: 1042 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run "bvcl"
data: C:\WINDOWS\msagent\msfsrg.com 


tested on Windows XP
January 03, 2005

MegaSecurity