by Onehalf
aka RServer
Written in Delphi
Released in July 2002
Made in Russia
Server: dropped file: c:\WINDOWS\nwbackup.exe size: 349.184 bytes port: 6000 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "NetBackup"MegaSecurity