DP Trojan 2.5
(Backdoor.Win32.DP.25)

By Fire-Crow

Released in June 1999


Server:
dropped files:
c:\~SETUP.T\viagra.exe      Size: 444.252 bytes 
c:\WINDOWS\SYSTEM\DP.EXE    Size: 98.304 bytes 

port: 669 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Focmcgiv"
data: C:\WINDOWS\SYSTEM\DP.EXE 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Fexspzrh"
data: C:\WINDOWS\SYSTEM\DP.EXE 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "Bjom"
data: C:\WINDOWS\SYSTEM\DP.EXE 

tested on Windows 98
February 25, 2006

MegaSecurity