fangshou's Tcp Back door - Malware Gallery

Informations

From	China
Author	angshou
Family	fangshou's Tcp Back door
Category	Remote Access
Version	fangshou's Tcp Back door
Released Date	Dec 2005, 18 years, 11 months ago.

Additional Information

Server:
port: 2089 TCP

tested on Windows XP
January 02, 2006

Author Information / Description

Usage
fangshou -install
fangshou -run 

-----------------    fangshou's BackDoor Command Help     -----------

[help]     ............................. Get Command Help.
[dir]      ............................. List Directory.
[cd]       ............................. Change Directory.
[del]      ............................. Delete File.
[copy]     ............................. Copy File.
[move]     ............................. MoveFile.
[ren]      ............................. Rename FileName.
[cmd/dos]  ............................. Command Shell.
[winexec]  ............................. Winexec Run Program.
[poweroff] ............................. Close Power.
[reboot]   ............................. Restart System.
[logoff]   ............................. Logon System.
[lockwork] ............................. Lock System.
[sysninfo] ............................. List System Info.
[pslist]   ............................. List System Processor.
[pskill]   ............................. Kill Process Pid.
[fport]    ............................. Process And Port.
[hdesk]    ............................. Hide/Show Desktop.
[htray]    ............................. Hide/Show Tray.
[ctrlcd]   ............................. Open/Close CDROM.
[mouse]    ............................. Lock/Unlock Mouse.
[popmsg]   ............................. Send Message.
[PlaySound]............................. Play Sound File.


nc -v 192.168.0.1 2089
     telnet 192.168.0.1 2089
     client 192.168.0.1 2089