Last 2000 (a) v2

Last 2000 (a) v2
(Backdoor.Win32.Last2000.a for Server)
(Backdoor.Win32.Singu.ad for Client)

by lovejingtao

Written in C++, compressed with ASPack

Released in November 2000

Made in China


Server:
dropped file:
C:\WINDOWS\SYSTEM\RUNVXD32.EXE

size: 347,648 bytes

port: 1122, 7788, 1415, 2000 TCP
      1122, 7788 UDP
	  
startup:
c:\windows\system.ini
HKCR\txtfile\shell\open\command

MegaSecurity