ShockRave
(Backdoor.Win32.Bowl)

by ?

Compressed with WWPack32

Released in November 1998


Telnet Trojan.


Server:
dropped file:
C:\WINDOWS\NETPOPUP.EXE

size: 38.912 bytes

port: 1981 TCP

startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

MegaSecurity