Dark FTP 1.4
(Backdoor.Win32.DarkFtp.14)

by ~ W . A . V . E . R ~

Written in Delphi

Released on April 2000

Made in Italy

more versions

 




dropped file:
c:\WINDOWS\SYSTEM\MSREGSCN.EXE
size: 363.520 bytes 
	
port: 21 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MSRegScan"
data: C:\WINDOWS\SYSTEM\MSREGSCN.EXE

tested on Windows 98
November 13, 2004
MegaSecurity