Y3K rat 1.4b
(Backdoor.Win32.Y3KRat.14.c)
(TrojanDropper.Win32.Joiner.n)

by -/Chucky-\- and [Firelarm]

Written in Delphi

Compressed with UPX

Released in November 2000

more versions

Bugs fixed




Server:
C:\WINDOWS\SYSTEM\Msscmc32.exe  

size: 316 KB

port: 5882, 5884, 5888, 5889 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Msscmc32" 

MegaSecurity