| Name: | Hvl RAT |
| Aliases: | Backdoor.HVL-Rat, |
| Ports: | 1092, 1095, 1097, 1098, 1099, 2283 |
| Files: | Rat5_3.zip - 366,735 bytes Ratclient5.3.0.zip - 187,854 bytes Ratt.zip - 171,456 bytes Ratt5.3.0.zip - 171,456 bytes Rattpa.zip - Rattpatcher.zip - 7,083 bytes Patcher.exe - 21,504 bytes .exe -Hvlrat client.exe - 168,448 bytes Msgsvr16.exe - Setup.exe - 295,396 bytes Wavestream.dll - 35,328 bytes Regsvr32.exe - 20,480 bytes Mswinsck.ocx - 101,648 bytes Comdlg32.ocx - 128,784 bytes Install.bat - 142 bytes |
| Created: | May 1999 |
| Requires: | Mswinsck.ocx and Wavestream.dll - are required to run the trojan. |
| Actions: | Remote Access |
| Registers: | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\ | |
| Notes: | Works on Windows 95,98 and NT. |
| Country: | |
| Program: | Written in Visual Basic 5.0. |