Blackhole 2005 Enterprise Build 20050328
(Backdoor.Win32.BlackHole.2005.p for Client)
(Backdoor.Win32.BlackHole.2005.k for Server)

by lovejingtao

Written in Delphi

Released in March 2005

Made in China

more versions


Server:
dropped files:
c:\WINNT\abc.cfg    Size: 3 bytes 
c:\WINNT\abc.exe    Size: 189,938 bytes 

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BLACK_HOLE2005_ENTERPRISE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Black Hole2005 Enterprise
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BLACK_HOLE2005_ENTERPRISE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Black Hole2005 Enterprise


tested on win2000
December 08, 2005

MegaSecurity