SchoolBus 1.60
(Backdoor.Win32.SchoolBus.a)

by Serdar Kabaoglu

Written in Delphi

Released in June 1999

Made in Turkey

more versions


Server:
c:\WINDOWS\SYSTEM\Grcframe.exe 

size: 398 KB

port: 43210, 54321 TCP

startup:
c:\WINDOWS\SYSTEM\RUNONCE.EXE 

added:
c:\WINDOWS\SYSTEM\ro.dll 

replaced:
c:\WINDOWS\SYSTEM\RUNONCE.EXE 

MegaSecurity