Boss 1.00
(Backdoor.Win32.VB.adp for Server)

by Red Move

Written in Visual Basic, compressed with UPX

Released in May 2005

more versions


Server:
dropped file:
c:\WINDOWS\system32\Boss.exe
size: 12,800 bytes 

port: 4853 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Boss Server"
data: C:\WINDOWS\System32\Boss.exe 



tested on Windows XP
May 29, 2005

MegaSecurity