WinS.A.T.A.N.
(Backdoor.Win32.WinSatan)

by CreaKer

Written in Delphi

Released in May 1999

Information


Server:
dropped file:
C:\WINDOWS\fs-backup.exe 

size: 366 KB

port: 999 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "RegisterServiceBackup" 

MegaSecurity