FAkEdOs 1.1
(Backdoor.Win32.Fakedos.c)
(Backdoor.Win32.Fakedos.b for server)

by GerArD

Written in Visual Basic

Released in November 2004

more versions


Server:
dropped file:
c:\WINDOWS\system32\fdos.exe
size: 196.668 bytes 
 
port: 60000 TCP (changeable)

startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "fdos"
data: C:\WINDOWS\System32\fdos.exe

tested on Windows XP
November 12, 2004 

MegaSecurity