WANRemote 3.0 (a)
(Backdoor.Win32.Wanremote.30.a)

by BRAiN/Digitalis

Written in Delphi

Released in March 2000

more versions


Server:
dropped file:
C:\WINDOWS\SYSTEM\MSHTTPD.EXE

port: 80 TCP

startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

MegaSecurity