Lamers Death 2.7 RC2 (b3)

Lamers Death 2.7 RC2 (b3)
(Backdoor.Win32.Death.27.a for editor.dll)
(Backdoor.Win32.Death.27.c for Client)
(Backdoor.Win32.Death.27.c for Server)
(Backdoor.Win32.Death.26 for editor)

by FreeLoader

Written in Delphi

Released in February 2003

Made in Russia

more versions


Server:
c:\WINDOWS\SYSTEM\winsock.exe 

size: 271.747 bytes

port: 30003 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "winsock.exe" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "internat.exe" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "winsock.exe" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "winsock.exe" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce "winsock.exe" 
c:\windows\system.ini, [boot] "shell" 
c:\windows\win.ini, [windows] "load" 
c:\windows\win.ini, [windows] "run" 


added:
c:\autorun.inf 
c:\WINDOWS\interface.dll 
c:\WINDOWS\SYSTEM\internat.exe

MegaSecurity