Created with SennaSpy Trojan Generator

Server:
C:\WINDOWS\SYSTEM\RICTA.EXE 

size: 41 KB

port: 2000 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices