Backdoor.Mosuck

Printer Friendly Page

Discovered: August 12, 2002
Updated: November 28, 2013 9:50:37 PM
Systems Affected: Windows

Backdoor.Mosuck is a very powerful and simple to use back door server program. The server is highly configurable, making it difficult to detect once installed. It also attempts to hide its presence by renaming the netstat utility when it is installed.

Antivirus Protection Dates

  • Initial Rapid Release version August 13, 2002
  • Latest Rapid Release version January 15, 2018 revision 020
  • Initial Daily Certified version August 13, 2002
  • Latest Daily Certified version January 15, 2018 revision 024
  • Initial Weekly Certified release date August 14, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Discovered: August 12, 2002
Updated: November 28, 2013 9:50:37 PM
Systems Affected: Windows

Backdoor.Mosuck is a configurable and powerful back door server program. It allows more than one remote user to connect to and control the server at once.

The server program allows a remote client to initiate an interactive session, similar to a pcAnywhere session. This allows the client to have full control over the server, including the ability to modify files, start and terminate processes, and manage the host. The remote user can also queue files for upload or download, display pop-up messages on the server, and update the server software remotely.

The server program can also be configured to rename the netstat.exe utility to netstat.old on installation. This is done in an effort to make connections to the server more difficult to detect.

The server can also be connected to from a telnet client.