NeuroticKat 1.1
(Backdoor.Win32.Neurotic.11)

by aka_katnhat

Written in Delphi

Released in July 2001

more versions


Server can disable:
AtGuard
Conseal
The Cleaner
BlackIce
ZoneAlarm
WinRoute


Server:
dropped files:
C:\WINDOWS\SERVER1_1.EXE    size: 489.984 bytes
c:\inputput.txt 
c:\WINDOWS\winsystem.sys 
c:\WINDOWS\winsystem.ini 

port: 222, 370, 831 TCP
	  
startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

MegaSecurity