Michal 5.0
(Backdoor.Win32.Netbus.170)

by Carl-Fredrik Neikter

Written in Delphi

Released in June 2001

more versions


Server:
dropped file:
C:\WINDOWS\WIZJATV.EXE

size: 494.592 bytes

port: 12345, 12346 TCP

startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

MegaSecurity