Basic Hell 1.0
(Backdoor.Win32.BasicHell.10 for Client)
(Trojan-Dropper.Win32.Multibinder.141 for Server)

by JBMAX

Written in Visual Basic

Released in April 2002


Server:
dropped files:
C:\WINDOWS\SYSTEM\BHS.EXE  size: 128,976 bytes
c:\WINDOWS\TEMP\tle13735314.exe 

port: 60666 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft - BHS" 

MegaSecurity