Falling Star 1.1 server
(Backdoor.Win32.FallingDoor.11)

by ?

Released in October 2002

Written in Visual Basic, compressed with ASPack

Made in China

more versions


Dropped Files:
c:\WINDOWS\SYSTEM\Exp1orer.exe 
c:\WINDOWS\SYSTEM\Internet.exe 
c:\WINDOWS\SYSTEM\N0TEPAD.exe 
c:\WINDOWS\SYSTEM\SystemTray.exe 

size: 46.080 bytes 

port: 7744 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Internet" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "SystemTray" 
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" 
HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)" 

added:
c:\WINDOWS\SYSTEM\W1dap32.dll 

MegaSecurity