PsyRAT 1.02 Chinese
(Backdoor.Win32.Agent.ju)

by Psyphen, modified by x140d4n

Written in Borland C++

Released in May 2005

more versions




Server:
size: 10,752 bytes

port: 9863 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Host"
data: C:\WINNT\system32\winhost.exe 



tested on Windows 2000
June 16, 2005

MegaSecurity