from the doc:ftppw 0.1coded by evilgoat03/11/02 18:38-= settings =- srv filename: filename to rename to on remote machinesrv port: port to listen on for connections srv target: remote directory to copy to, use percentpercentWINDIRpercentpercent for windows directory or percentpercentSYSDIRpercentpercent for system directorysrv regkey: name of regkey to add under Run keysrv user: server usernamesrv pass: server passwordcgi url: if using the cgi notify enabled server, the url to a cgi script see "sample cgi scriptarco.pl" for an example of a cgi scriptopen ftp checkbox: if enabled, will allow any username/password access to the ftp server-= custom ftp commands =-site exec : exec the filename specifiedsite srvclose: close the ftp serversite srvremove: close the ftp server and remove the registry keyevilgoat
Backdoor Program [Panda]Backdoor.EvilGoat.b [Kaspersky]Backdoor.FTP.Evilgoat.bBackdoor/EvilGoat.b [Computer Associates]
modify.exeserver.exeserver-cginotify.exeWindowsftpsvr.exe