ReMoTe ShElL 2.1
(Trojan.Win32.Scar.xzt)

by memo_11

Released in July 2008

more versions




Server
Dropped File:
c:\WINDOWS\system32\ipcomfig.exe
Size: 32,768 bytes 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "(Default)"
Data: c:\windows\system32\ipcomfig.exe 
	
Port: 9999 TCP



Tested on Windows XP
October 01, 2008

MegaSecurity