Alien Spy 1.0 & 1.1
(Backdoor.Win32.Alien)

by Black Flash

Written in Visual Basic, compressed with ASPack

Released in August 2001


Server:
dropped file:
C:\WINDOWS\SYSTEM\SERVER.EXE

size: 32.256 bytes

port: 5447 TCP
does not listen to any port
until internet connection is established

startup:
c:\windows\win.ini

MegaSecurity