SubSari 1.3 - 3S (a)
(Backdoor.Win32.SubSari.13.a)

by KiPSOFT

Released in February 2001

Made in Turkey

more versions


Server:
C:\WINDOWS\SYSTEM\kuusbffc.EXE 

size: 239.104 bytes

port: 3131, 40308 TCP

startup:
c:\windows\system.ini

added:
c:\WINDOWS\SYSTEM\ICQINET.DLL 
c:\WINDOWS\SYSTEM\ZIMBIRTI.EXE 

MegaSecurity