Shadow Remote Administrator&Control 1.4a (c & e)
(Backdoor.Win32.RCServ.e)

by RedShadow

Written in Delphi

Released in April 2003

more versions


Server:
size: 404.480 bytes

port: 4128 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Server.exe"
data: C:\Program Files\SR\Server.exe

tested on Win2000 

MegaSecurity