Precursor 1.0
(Backdoor.Win32.Precursor.10)

by Chris Aliotta

Written in Visual Basic

Released in October 1999

more versions


Server:
dropped file:
C:\WINDOWS\SYSTEM\PSERVER.exe

size: 260 KB

port: 12310 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Precursor Server" 

added:
c:\WINDOWS\SYSTEM\ps99.ini 

MegaSecurity