Discovered: November 15, 2001
Updated: November 15, 2001 4:29:42 PM
Systems Affected: Windows 98, Windows 95, Windows Me, Windows NT, Windows 2000
Backdoor.Mosuck is a configurable and powerful back door server program. It allows more than one remote user to connect to and control the server at once.
The server program allows a remote client to initiate an interactive session, similar to a pcAnywhere session. This allows the client to have full control over the server, including the ability to modify files, start and terminate processes, and manage the host. The remote user can also queue files for upload or download, display pop-up messages on the server, and update the server software remotely.
The server program can also be configured to rename the netstat.exe utility to netstat.old on installation. This is done in an effort to make connections to the server more difficult to detect.
The server can also be connected to from a telnet client.