Titi 1.01
(Backdoor.Win32.Titidoor.101)

by bart/xtreeme

Invisible telnet server

Written in Assembly, source included

Released in February 2002


Server:
dropped files:
c:\WINDOWS\SYSTEM\LFTIF90N.EXE   Size: 32.256 bytes
c:\WINDOWS\wininit.ini 

port: 6618 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "lftif90N.exe" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "lftif90N.exe" 

MegaSecurity