Name: ButtMan
Aliases: BM, Backdoor.Buttman, Backdoor.Tubma, Backdoor.BR, Tubma,
Ports: 23, 12623, 12623 (UDP), 12624 (ports can not be changed)
Files: Buttman.zip - 442,753 bytes Buttman0.9.zip - Duncntrl.exe - 412,672 bytes Bmclient.exe - 512,512 bytes Bt.dll - Fngkhlib.dll - Icqmapi.dll -
Created: Sep 1999
Actions: Remote Access
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Notes: Works on Windows 95, 98 and NT.
Country: written in Switzerland
Program: Written in Delphi 3.0, some Borland C++ 5.0 and some Assembler.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>