Danton 4.0.0 beta
(Backdoor.Win32.Danton.40)

by Lol_ek

Written in Delphi

Released in May 2003

Made in Poland

more versions

 


Server:
dropped file:
c:\WINDOWS\system32\DantonS 4.0.0. beta.exe
size: 526,336 bytes 

port: 6969, 6970, 6971, 6872 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Danton4"
data: C:\WINDOWS\System32\DantonS 4.0.0. beta.exe 



tested on Windows XP
February 10, 2005

MegaSecurity