WinProtectFull
(Backdoor.NetCoach)

by ?

Written in Delphi

Released in April 2002




Server:
c:\WINDOWS\SERVER.EXE 

size: 393.216 bytes 

port: 23 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SchedulingAgent" 

MegaSecurity