(Backdoor.Win32.Mosuck.21.b)
(Backdoor.Win32.Mosuck.21.a)
by Krusty
Written in
Visual Basic
Created in 2001
Compressed with
UPX
Made in Germany


Bugs fixed.
MoSucker can auto load with the
system.ini and/or the registry.
Unlike any other trojan,
MoSucker can be set to randomly
choose with which method to auto load.
MoSucker can notify cell
phones via SMS in Germany only.
Also note that this version of
MoSucker has many extra protection features,
which makes removal much harder.
Server:
c:\WINDOWS\MSNETCFG.EXE
size: 182 KB
port: 20005 TCP
startup:
c:\windows\system.ini, [boot] "shell"
|