TNT 1.1 v2
(Backdoor.Win32.Teldoor.a)

by Mr Hawk

aka TelNet Trojaner, capable of disabling anti-virus programs

Written in Visual Basic, compressed with UPX

Released in May 2004

Made in Germany

more versions


Server:
dropped file:
c:\WINDOWS\win32TN\win32TN.exe 

size: 110.592 bytes

port: 23 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MSNet"

MegaSecurity