Back Attack 2.0
(Backdoor.Win32.BackAttack.20)

by [Remaker]

Written in Delphi, compressed with UPX

Released in September 2003

Made in Romania

more versions


Server:
c:\WINDOWS\Clear.exe 

size: 339.968 bytes 

port: 80, 11031 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "28520Sysno" 

added:
c:\WINDOWS\TaM.scr 
c:\WINDOWS\Winrgtd.drr

MegaSecurity