Leszcz 5.50
(Backdoor.Win32.Netbus.170)

by Carl-Fredrik Neikter
modified by Meody Hacker

Written in Delphi

Released in November 2001

more versions



Server:
dropped file:
C:\WINDOWS\VIVA.EXE

size: 495.011 bytes

port: 1983, 1984 TCP

startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

MegaSecurity