MatU Troyan 3.0
(not-a-virus:RemoteAdmin.Win32.VB.a)
(Trojan.Win32.VB.bla)

by MatU

Released in September 2007

Written in Visual Basic

more versions




Server
Dropped Files:
c:\WINDOWS\LSASS.exe      Size: 69,632 bytes 
c:\WINDOWS\SVCHOST.exe    Size: 32,768 bytes 
c:\WINDOWS\wscntfy.exe    Size: 24,576 bytes 
c:\WINDOWS\system\debug.txt

Port: 7576, 123, 999 TCP



Tested on Windows XP
September 18, 2007

MegaSecurity