Dark FTP 1.2
(Backdoor.Win32.DarkFtp.12)

by ~ W . A . V . E . R ~

Written in Delphi

Released on April 2000

Made in Italy

more versions 




dropped file:
c:\WINDOWS\SYSTEM\MSREGSCN.EXE
size: 359.936 bytes 
	
port: 21 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MSRegScan"
data: C:\WINDOWS\SYSTEM\MSREGSCN.EXE 

tested on Windows 98
November 13, 2004
MegaSecurity