by Onehalf
aka RServer
Written in Delphi
Released in April 2001
Made in Russia
Server: dropped file: c:\WINDOWS\nwbackup.exe size: 350.208 bytes port: 6000 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "NetBackup"MegaSecurity