Khe Sanh 2.10 Pro
(Not detected by KAV on March 16, 2008)

by Zakharov

Compressed with PECompact

Released in February 2003

Made in Russia

more versions


Client:
port: 23342 TCP



Server:
dropped file:
c:\WINDOWS\SYSTEM\KSSRV.EXE 

size: 61.440 bytes 

port: 12389 TCP
	  
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "TBoot0001" 

MegaSecurity