Thing 1.6 modified
(Backdoor.Win32.TheThing.16.d)

by Blade
modified by KïÐ ÄRCåÐê

Made in Romania

more versions

*******************************
The Thing 1.6z for GODWILL 
(MODIFIED VERSION)
*******************************

Systems: Win9x/ME/2000/NT 

- we ripped the ICQ notify and hide in task function
+ now it works on NT/2000 and it doesn´t try to auto connect to internet
  (most users have auto dial-up configured)
+ maybe stealth for AV-Software (not tested yet)
+ cool skin!

Usage:
======
Use the server for GODWILL and add ICQ notify feature to the infected page
or use it on victim with static ip

settings:
=========
Port: "6667"
Psw: "gw"
Servername: "netmsg32.exe"

!!!NOTE: U CAN'T CHANGE THE SERVER SETTINGS ANYMORE!!!


TheThing 1.6 by _Blade_
client was modificated with HexEdit only (!!!)

09/12/2000

Authors:
- ·=[KïÐ ÄRCåÐê]=· - UIN: 30111278
- [FLuX]


Server:
dropped file:
C:\WINDOWS\netmsg32.exe

size: 8 KB

port: 6667

startup:
c:\windows\system.ini

MegaSecurity