Luzak 1.00 PL
(Backdoor.Win32.NetBus.170)

by Carl-Fredrik Neikter
modified by mamelke

Written in Delphi

Released in March 2002

Made in Poland

more versions


Server:
c:\WINDOWS\MTV.EXE 

size: 495.011 bytes 

port: 8889, 8890 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MTV" 

added:
c:\WINDOWS\MTV.ini 
c:\WINDOWS\verbati.dll

MegaSecurity