IRC controlled FTP Trojan.
Coded in Delphi 4




Server:
C:\WINDOWS\SYSTEM\MSREGSCN.EXE

port:
21 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\