by White Scorpion
Written in Assembler, source included
Released in August 2005
Made in The Netherlands
Tiny v3.2 Tiny is a small backdoor which installs itself in stealth and can be removed again by connecting to it and chosing the correct option from the menu. Connect to Tiny using netcat since Tiny won't allow you to enter the password using telnet. default port is: 63714 password: Tiny v3.2 -Tiny is now distributed as one executable, no seperate dll needed (it's inside tiny). White Scorpion dropped files: c:\WINDOWS\userinit.dll Size: 8,192 bytes (Backdoor.Win32.Small.ew) c:\WINDOWS\userinit.exe Size: 14,336 bytes port: 63714 TCP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Userinit" old data: C:\WINDOWS\system32\userinit.exe, new data: C:\WINDOWS\userinit.exe tested on Windows XP September 23, 2005MegaSecurity