fangshou's Tcp Back door - Malware Gallery

Informations

From	China
Author	angshou
Family	fangshou's Tcp Back door
Category	Remote Access
Version	fangshou's Tcp Back door
Released Date	Dec 2005, 19 years, 1 month ago.

Additional Information

Server:
port: 2089 TCP

tested on Windows XP
January 02, 2006

Author Information / Description

Usage
fangshou -install
fangshou -run 

-----------------    fangshou's BackDoor Command Help     -----------

[help]     ............................. Get Command Help.
[dir]      ............................. List Directory.
[cd]       ............................. Change Directory.
[del]      ............................. Delete File.
[copy]     ............................. Copy File.
[move]     ............................. MoveFile.
[ren]      ............................. Rename FileName.
[cmd/dos]  ............................. Command Shell.
[winexec]  ............................. Winexec Run Program.
[poweroff] ............................. Close Power.
[reboot]   ............................. Restart System.
[logoff]   ............................. Logon System.
[lockwork] ............................. Lock System.
[sysninfo] ............................. List System Info.
[pslist]   ............................. List System Processor.
[pskill]   ............................. Kill Process Pid.
[fport]    ............................. Process And Port.
[hdesk]    ............................. Hide/Show Desktop.
[htray]    ............................. Hide/Show Tray.
[ctrlcd]   ............................. Open/Close CDROM.
[mouse]    ............................. Lock/Unlock Mouse.
[popmsg]   ............................. Send Message.
[PlaySound]............................. Play Sound File.


nc -v 192.168.0.1 2089
     telnet 192.168.0.1 2089
     client 192.168.0.1 2089