RTB 666


Name: RTB 666
Aliases: Backdoor.RTB,
Ports: 21, 23, 80, 623, 680 (ports can be changed)
Files: Rtb666_0.95.zip - Rtb666_0.96.zip - 341,489 bytes Rtb666_1.04.zip - 451,496 bytes Rtb666_1.12.zip - 452,535 bytes Rtb666_1.4.zip - Rtb666_1.6.zip - Rtb666_1.65.zip -Rtb666 1.65a.zip - Shellapi.exe - 138,240 bytes Systray.exe - 151,040 bytes Systray.exe - 195,584 bytes Systray.exe - 211,456 bytes Client.exe - 217,600 bytes Client.exe - 219,648 bytes Client.exe - 263,680 bytes Client.exe - 282,112 bytes Client.exe - 283,136 bytes Register.reg - 118 bytes Register.reg - 258 bytes Rtb.chm - 97,839 bytes Justhelp.hlp - 14,422 bytes Justhelp.hlp - 16,426 bytes Justhelp.hlp - 21,360 bytes Mstasks.exe -
Created:
Requires:
Actions: Remote Access / FTP server / IP scanner
Registers: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows, together with MS Internet Explorer.
Country: written in Poland
Program:

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>