NetSphere 1.29 Server
(Backdoor.Win32.NetSphere.129)

by Sean "DeathBreadstick" Hamilton and Adam "Beefcake" McGirr

Written in Delphi

Released in 1999

more versions


 

Server:
dropped files:
c:\WINDOWS\SYSTEM\iosubnet.sys    Size: 132 bytes 
c:\WINDOWS\SYSTEM\nssx.exe        Size: 670.720 bytes 

port: 30100, 30101, 30102 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "NSSX"
data: C:\WINDOWS\system\nssx.exe 



tested on Windows 98
June 06, 2005

MegaSecurity