Anti-Lamer BackDoor 2.0 (a & b)

Anti-Lamer BackDoor 2.0 (a & b)
(Backdoor.Win32.Antilam.20.a)
(Backdoor.Win32.Antilam.20.b for server)

by OverG

Based on source of Latinus

Written in Delphi

Released on August 08, 2002

Made in Russia


Server:
C:\WINDOWS\Scandisk.exe 

size: 182.998 bytes

port: 29999, 47891 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "MS Scandisk" 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "MS Scandisk" 

Added:
c:\WINDOWS\SCAN.DLL

MegaSecurity