51D 1b
(Backdoor.Win32.Delf.mw for Client & editserver)
(Backdoor.Win32.Antilam.g1 for server)

by Jorge

Written in Delphi

Released in April 2004





Server:
dropped file:
c:\WINDOWS\Soft51D.exe 
 
size: 535.040 byte

port: 11831, 59559 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Soft Micro"

MegaSecurity