DarkFace 2.0
(Backdoor.Win32.Antilam.g1 for Server)
(Backdoor.Win32.Pestdoor.31 for Editserver)

by Killerbeat

Written in Delphi

Released in June 2002

Made in Germany

more versions


Server:
C:\WINDOWS\msHtml.exe 

size: 488 KB

port: 11831, 29559 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "MS HTML" 

MegaSecurity