Thing 1.6
(Backdoor.Win32.TheThing.16)

by Blade

Compressed with PEtite

Made in Romania

more versions


dropped file:
c:\WINDOWS\Cmmnds32.exe
size: 4.616 bytes 

startup:
c:\windows\system.ini, [boot] "shell"
old value: Explorer.exe 
new value: explorer.exe Cmmnds32.exe 


tested on Windows 98
December 15, 2004

MegaSecurity