WAY 2002 (a)
(Backdoor.Win32.Way.2002.a)

by Phoenix


Compressed with ASPack

Released in April 2002

Made in China

more versions



Client:
port: 8203, 8555 TCP



Server:
C:\WINDOWS\SYSTEM\Kernel32.exe 

size: 264.819 bytes

port: 8225 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "LoadWindows" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "LoadWindows" 

MegaSecurity