Shadow Remote Administrator server (b)
(Backdoor.Win32.RCServ.b)

by RedShadow

Written in Delphi

more versions 


Server:
size: 543.744 bytes

dropped files:
c:\WINDOWS\Desktop\BACKDOOR.RCSERV.B.dat    size: 95 bytes 
c:\WINDOWS\Desktop\BACKDOOR.RCSERV.B.dll    size: 17.920 bytes 

port: 4128 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

tested on Windows 98
December 02, 2004
MegaSecurity