BFGhost 1.0
(Backdoor.Win32.DKangel.10 for Server)

by yyt_hac

Compressed with ASPack

Released in October 2002

Made in China



Server:
dropped file:
c:\WINDOWS\conime.exe 

size: 67.072 bytes
 
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "DKAngel" 

added:
c:\WINDOWS\SYSTEM\Regsys.vxd 
c:\WINDOWS\SYSTEM\Service.dll 
MegaSecurity