netnet 1.70
(Backdoor.Win32.Valvoline for Client)
(Backdoor.Win32.Netbus.170 for Server)

by Carl-Fredrik Neikter

Written in Delphi

Released in September 2000

more versions


Server:
dropped files:
c:\WINDOWS\keykook.dll
size: 55.296 bytes
 
c:\WINDOWS\Patch.exe
size: 201.728 bytes 
	
port: 12345, 12346 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Patch"
data: C:\WINDOWS\Patch.exe /nomsg 

tested on Widows XP

MegaSecurity