NetSnake (h)
(Backdoor.Win32.Netsnake.h)

by MiniSnake

Written in Visual C++, compressed with ASPack

Released in October 2004

Made in China

more versions


dropped file:
c:\WINNT\system32\iexplore.exe

size: 58.280 bytes
 
port: 1040, 1045 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mssysint"
data: iexplore.exe
 
tested on Win2000

MegaSecurity