Russian Trojans : Shadow Remote Administrator & Control 1.4

Shadow Remote Administrator & Control 1.4

Name: Shadow Remote Administrator & Control
Version: 1.4
Author: MelcoSoft & RedShadow
Language: Delphi
Default port: n/a
Packed: UPX 1.07 (client & server (1)), modified UPX (client (2)), not packed (server (2))

Client Server
Icon
(1) Size 730112 (18.03.2001) 148992 (15.03.2001)
(1) KAV detected Backdoor.RCServ.c Backdoor.RCServ.c
(2) Size 733184 (26.03.2001) 404480 (15.03.2001)
(2) KAV detected Backdoor.RCServ.c Backdoor.RCServ.c

Version (2) is a registered version (1).

	Client	Server
Icon
(1) Size	730112 (18.03.2001)	148992 (15.03.2001)
(1) KAV detected	Backdoor.RCServ.c	Backdoor.RCServ.c
(2) Size	733184 (26.03.2001)	404480 (15.03.2001)
(2) KAV detected	Backdoor.RCServ.c	Backdoor.RCServ.c

Client:

Warning:
Installer add to registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Shadow Remote Administrator&Control 1.04a]
"DisplayName"="Shadow Remote Administrator&Control 1.04a"
"UninstallString"="C:\\WINDOWS\\UnGins.exe \"C:\\Program Files\\SR\\install.log\""