Home Malware Programs Remote Administration Tools Back Attack

Back Attack

Posted: March 28, 2006

Several versions appeared of this Romanian RAT tool appeared from February 2003 to March 2004. As the number of the version grows, so does the amount of functions and damage, that can be done by this hacker tool. Each version has new ways of infecting and damaging your computer. The virus was designed so, that it can crash your computer completely with just one mouse click. The author is a hacker called Remarker. The applicationming language is Delphi compressed with UPX. The tool was designed so, that it can crash your computer completely with just one mouse click. Versions: Back Attack

File System Modifications

  • The following files were created in the system:
    # File Name
    1 006a0f9f.exe
    2 5f035cc6.exe
    3 backdoor.backattack.14.exe
    4 backdoor.backattack.19[2].exe
    5 bae3e725.exe
    6 bclient.exe
    7 clean.exe
    8 license.txt
    9 matrix.scr
    10 tam.scr
    11 winrgtd.drr

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionegistrycheckerHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionegl1.2HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionegvn3.3un
Loading...