Earthquake 1.5
(Backdoor.Win32.Delf.ee)

by ?

Written in Delphi

Compressed with ASPack

Released in December 2002

Made in China

more versions






Server:
dropped file:
C:\WINDOWS\SYSTEM\SysService.exe 

size: 177.664 bytes

port: 2444 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SysService" 

MegaSecurity