BackConstruction 1.2
(Backdoor.Win32.Nightmare.12)

by P23h

Compressed with ASPack

Released in June 1999

more versions


Server:
dropped file:
c:\WINDOWS\Cmctl32.exe 

size: 179.200 bytes 


port: 5400, 5401 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Shell" 

MegaSecurity