AntiLamer BackDoor 1.0
(Backdoor.Win32.Antilam.11)
(Backdoor.Win32.Antilam.g1 for Server.exe)

by OverG

Based on source of  Latinus

Written in Delphi

Released in April 2002

Made in Russia

more versions


Server:
C:\WINDOWS\scandisk.exe 

size: 160.768 bytes

port: 29559, 47891 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "MS Scandisk" 

MegaSecurity