Ketch (e)
(Backdoor.Win32.Ketch.e)

by I.R.W.W.

Written in Microsoft Visual C++, compressed with UPX

Released in April 2004

more versions




size: 104.960 bytes

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "sysmon"
data: C:\WINDOWS\System32\sysmon42.exe 

MegaSecurity