.: BackConstruction 2.0 :.

Released 23 years, 3 months ago. Jun 1999

By P23h

Additional Details

  • Coded by: P23h
  • Version: BackConstruction 2.0
  • Released date: Jun 1999, 23 years, 3 months ago.
  • Family: BackConstruction
  • Category: Remote Access

MegaSecurity Notes

dropped file:
c:\WINDOWS\Cmctl32.exe  (only on Windows 98)
size: 177.664 bytes 

port: 5400, 5401, 5402 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Shell"  (only on Windows XP)
data: Cmctl32.exe 



tested on Windows 98 and Windows98
January 19, 2005

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.