by LoST DaTa
Written in Visual Basic
Client: port: 1098 TCP Server: C:\WINDOWS\system\MSGSVR16.EXE size: 289 KB port: 1095, 1097, 1098, 1099 TCP startup: HKLM\Software\Microsoft\Windows\CurrentVersion\Run HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesMegaSecurity