Back Attack 1.4
(Backdoor.Win32.Backattack.14)

by CurrenTChaoSGroup

Written in Delphi, compressed with UPX

Released in May 2003

Made in Romania

more versions


Server:
c:\WINDOWS\Clean.exe 

size: 305.152 bytes 

port: 10359, 12471, 12504, 31163, 32076, 32365, 33812 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "CleanRegV1.2" 

added:
c:\WINDOWS\LICENSE.TXT 
c:\WINDOWS\Matrix.scr 

MegaSecurity