Shadow Remote Administrator 1.4 MOHTRF
(Backdoor.Win32.RCServ.c for Client)
(Backdoor.Win32.RCServ.i for Server)

by RedShadow

Written in Delphi

more versions 


Server:
size: 149,300 bytes

port: 4128 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Server.exe"

tested on Windows 2000
December 06, 2005
MegaSecurity