Traffix RAT 0.3
(Backdoor.Win32.VB.bdn)
(Backdoor.Win32.VB.aca for Server)

by Pyrox aka Affix

Written in Visual Basic

Released in April 2007

more versions 


Server
dropped files:
c:\WINDOWS\winApi.exe           Size: 225,280 bytes 
c:\WINDOWS\system32\zlib.dll    Size: 53,248 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Windows API Manager "StubPath"
data: C:\WINDOWS\winApi.exe 




tested on Windows XP
April 13, 2007
MegaSecurity