Y3K rat 1.0
(Backdoor.Win32.Y3KRat.10)

by -/Chucky-\- and [Firelarm]

Written in Visual C++

Compressed with ASPack

Released in May 2000

more versions


Server:
dropped file:
C:\WINDOWS\RundII.exe 

size: 281 KB

port: 5882, 5888, 5889 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Explorer32" 

MegaSecurity