by DFG
Written in Delphi, encrypted /compressed with tElock
Made in Romania
dropped files: c:\Program Files\dfgbot706.ini size: 13.772 bytes c:\WINNT\system32\Tasknom706.scr size: 279.552 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MSFree706" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Tasknom706" port: 1894 TCP does connect to an IRC server tested on win2000MegaSecurity