CAB OF FILTH 1.2a
(Backdoor.Win32.Filth.d for Client)
(Backdoor.Win32.VB.gen for Server)

by Eludo

Written in Visual Basic

Released in February 2004

Made in Brazil

more versions


Client:
dropped files:
c:\%local dir%\listaips.txt 
c:\WINDOWS\cofsrv.exe  (106.496 bytes) 

port: 666 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "COF" 
data: C:\WINDOWS\cofsrv.exe 



Server:
size: 106.496 bytes bytes

port: 666 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "COF" 

MegaSecurity