Written in C

more versions

Commands:

version                                          - Makes the bot report its version
clrbuf                                           - Clears all buffers
get    <http address>                            - Downloads a file from the web only
run    <http address>                            - Downloads and runs a program from the web
nick   <nickname>                                - Set the bot nickname
setbuf <id#> <string>                            - Sets the dump buffer for mclone and dump
icmp   <target> <flag> <size> <secs> <spoofmode> - Advanced ICMP Flooder
crap   <target> <port> <threads> <secs>          - Connects to target and dumps garbage
mclone <server> <port> <num> <secs> <holdtime>   - IRC Clone Flooder
dump   <target> <port> <num> <secs> <holdtime>   - A TCP Buffered Flooder
mcon   <target> <port> <num> <secs> <holdtime>   - A Connection Flooder
rtcp   <target> <port> <secs> <flag> <spoofmode> - Advanced TCP Flooder
udp    <target> <port> <size> <secs> <delay>     - A UDP bomber
tcp    <target> <port> <secs>                    - A TCP SYN Flooder
push   <target> <port> <secs>                    - A TCP PUSH Flooder


Backdoor.Win32.Ubersor.c:
size: 86,706 bytes

port: 113 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Service"
data: %local dir%\Backdoor.Ubersor.c.EXE 



tested on Windows XP
March 13, 2005