| Name: | AntiBTC |
| Aliases: | IE0199.EXE, Trojan.Win32.AntiBTC, Ataka, SNDVOL, IEPatch, |
| Ports: | |
| Files: | IE0199.exe - 28,928 bytes Mprexe.dll - Sndvol.exe - |
| Created: | Jan 1999 |
| Requires: | |
| Actions: | Autodialing trojan |
| It randomly connects to three Bulgarian Web- sites:http://www.btc.bg/, http://www.infotel.bg/, and http://ns.infotel.bg/. | |
| Versions: | |
| Registers: | HKEY_USERS\.Default\Software\Microsoft\Windows\CurrrentVersion\InternetSettings\EnableAutodialHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\Known16DLLs\ |
| Notes: | Works on Windows. |
| Country: | written in Bulgaria (??) |
| Program: |