|
(Backdoor.Win32.Y3KRat.15.b for Client)
(Backdoor.Win32.Y3KRat.15.a for Server)
(TrojanDropper.Win32.Joiner.n)
by -/Chucky-\-
and [Firelarm]
Written in
Delphi
Compressed with
UPX
Released in
January 2001
Server:
C:\WINDOWS\SYSTEM\Dcomcnofg.exe
size: 321 KB
port: 5882, 5884, 5888, 5889 TCP
startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Dcomcnofg"
| 
