SubSARI 1.2
(Backdoor.Win32.SubSari.12)

by KiPSOFT

Released in June 2000

Made in Turkey

more versions


Server:
C:\WINDOWS\SYSTEM\WINEXEC.EXE 

size: 204.800 bytes

port: 6711, 3131, 50000 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 

MegaSecurity