From the doc: ' rSocks is a small easy-to-use Socks4 server. - runs hidden from task manager (not process manager). - server-size: 3kb/3.5kb unpacked - autostart methods: HKLM Run, RunOnce, RunServices; ActiveX; WinLogon(if 2k/Xp/NT) - melt-server option'
Backdoor.Rsocks.12BackDoor-ATC.cfg trojan