rSocks 1.2
(Backdoor.Win32.Rsocks.12)

by r3ad

Released in March 2003

more versions


 rSocks is a small easy-to-use Socks4 server.
 
 - runs hidden from task manager (not process  manager).
 - server-size: 3kb/3.5kb unpacked
 - autostart methods: 
 HKLM\ Run, RunOnce, RunServices; ActiveX; WinLogon(if 2k/Xp/NT)
 - melt-server option
   

 .package contains:
 - rSocks 1.2.exe <- server generator
 - readme.txt
 - FSG.exe <- exe-packer, works fine with rSocks

 .updates:

 v1.2
 - added more autostarts
 - added melt-server
 
r3ad 


Server:
dropped file:
c:\WINDOWS\SYSTEM\SystemCheck.exe 

size: 3.072 bytes

port: 1337 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "SystemCheck" 

MegaSecurity