Evade 1.12
(Backdoor.Win32.VB.wm)

by FeraliX

Written in Visual Basic

Released in September 2004

more versions


Change Log/Info
Heh, I Changed It AGAIN :P And Removed Everything But A File Manager. (Who Need's All Those Fancy Option's Anyways?)
• Removed The Plugin System. (It Sucked...)
• Made The File Manager GUI Better. (Not Finished With It Yet)
• Server Is 12kb Packed With UPX.

Bugs/Errors
• Of Course I Threw In Some Bugs, It's No Fun Without Them.

FeraliX



Server:
dropped file:
c:\WINNT\system32\winhost.exe

size: 12.347 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Host"
data: C:\WINNT\system32\winhost.exe 

tested on Win2000

MegaSecurity