Back Attack 1.6
(Backdoor.Win32.Backattack.14)

by CurrenTChaoSGroup

Written in Delphi, compressed with UPX

Released in July 2003

Made in Romania

more versions


Server:
c:\WINDOWS\Clean.exe 

size: 325.632   bytes 

port: 80, 21163, 22076, 22365, 23812, 41431, 43576 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "CleanRegCV1.3" 

added:
c:\WINDOWS\LICENSE.TXT 
c:\WINDOWS\Matrix.scr 

MegaSecurity