Helios 2.4
(Backdoor.Win32.Helios.24)

by HelioS

Written in Visual Basic

Released in September 2002

Made in Belgium

more versions


Server:
C:\WINDOWS\SYSTEM\ScanStartup.exe 

size: 110.592 bytes

port: 3737 TCP

startup:
HKLM\Software\Microsoft\Active Setup\Installed Components\Scanstartup.exe "StubPath" 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Scanstartup.exe" 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "Scanstartup.exe" 

MegaSecurity