School Bus


Name: School Bus
Aliases: Backdoor.SchoolBus.A, SchoolB.C, ScBus,
Ports: 44767, 44767 (UDP), 54321 (port can not be changed)
Files: Schoolbus.zip - 440,982 bytes Schoolbus160.zip - 519,976 bytes Schoolbus2.zip - 715,835 bytes Schoolbus2.0.zip - Schoolbus_tr2.0.zip - Server.zip - 209,778 bytes Client.exe - 452,096 bytes Client.exe - 609,792 bytes Client.exe - 785,504 bytes Setup.exe - 407,040 bytes Setup.exe - 414,720 bytes Server.exe - 328,110 bytes Grcfram.exe - 575,488 bytes Runonce.exe - 16,896 bytes Ro.dll - 11,264 bytes Ro.dll - 40,960 bytes
Created: April 1999
Requires:
Actions: Remote Access / Steals passwords
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\orVersions 1.50 and 1.60 doesn´t register.
Notes: Works on Windows 95, 98 and ME.
Country: written in Turkey (?)
Program: Written in Delphi.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>