BackDoor

Aliases: Backdoor.Inuk, Backdoor.Notpa, Backdoor.Zemac.a, Backdoor.Zemac.b, Backdoor.Zemac.c, Backdoor.Zemac.d, Suriv_2.1488.c, MultiDropper-E, Nomenklatura, Nomenklatura.1024.a, Nomenklatura.a, Quit.555.a, Quit.555.b, Suriv.1488, Trojan.AOL.PS.ej, TrojanDropper.Win32.EliteWrap.103
Variants: 1.0, 2.0, 2.01, 2.02, 2.03, 2.1
Port: 1999 – changeable
Size: 110kb
Author: ZeMac
Created: APR 1997
OS: Windows 95, 98, NT, ME, 2000
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: notpa.exe, icqnuke.exe, readme.exe, 011e3ecab24891617792f6cc556c541f.exe, 02a572cd0e1d2ff8393075b839efcb64.exe, 04986c5cdcecf53f6bf739c1599a03ce.exe, 061da56505834b273a475f3827544e17.exe, 07596ec68058a0eba10bf02b7a88d048.exe, 07ff265743f71b15cc23bb814557f8e5.exe, 0ad266c58b49ee7d239b032b4c69e628.exe, 0c0002d8878bf0f373d352332ae7124f.exe, 0c573e14354d5b00e91161d3deef0df7.exe, 0ef88726226d112172058358b80f9b03.exe, -1134054079.exe, 1427142166.exe, 146f8b1cc9be67e99e0ccc5ad10acfd2.exe, 1476552388.exe, 147bb8297e9cac245b35fc56c826f629.exe, 1670a7b26eac340d7e177bbb47ddfee0.exe, 1842849d10ce64dba5a853776610e006.exe, 1b63703a58b3b17098c080c84a35bd85.exe, 442804435.exe, 959296333.exe, b_login.exe, backdoor.af.exe, backdoor.c, backdoor.exe, backdoor.haw.exe, backdoor.mdm.exe, backdoor.nb.exe, backdoor.pld.exe, backdoor.raw.exe, backdoor.rdr.exe, backdoor.tms.exe, backdoor.txt, backdoor.vb.ga.exe, backdoor.xel.exe, backdoor.zkt.exe, ftpip.exe, manual.nfo, ppupdater.exe, runtime.txt, server.txt, showall.exe, xxx.exe, zemac.a.exe

This entry was posted in B and tagged , , . Bookmark the permalink.

Leave a Reply