Thing 1.5
(Backdoor.Win32.Thing.15)
(Backdoor.Win32.Thing.a)

by Blade

Written in Delphi

Released in June 1999

Made in Romania

more versions


Server:
dropped files:
C:\WINDOWS\SYSTEM\ipack99.exe 
C:\WINDOWS\CLSPACK.EXE

size: 40.960 bytes

port: 6400 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 
c:\windows\system.ini

MegaSecurity