rSocks 1.0
(Backdoor.Win32.Rsocks.10)

by r3ad

Released in March 2003

more versions


 rSocks is a small easy-to-use Socks4 server.
 
 - runs hidden from task manager (not process  manager).
 - registry autostart (HKLM, RunServices)
 - server-size ~3kb unpacked
 
r3ad 


Server:
dropped file:
c:\WINDOWS\SYSTEM\SystemCheck.exe 

size: 3.072 bytes 

port: 1337 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "SystemCheck" 


MegaSecurity