Erazer 1.1
(Backdoor.Win32.Delf.qz for Client)
(Backdoor.Win32.Agent.cu for Server)

by (v)aster

Written in Delphi

Released in October 2004

Made in Austria

more versions




Server:
dropped file:
c:\WINNT\MsgNet32.exe

size: 741.376 bytes 

port: 10426, 56185 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsoft Net"
data: C:\WINNT\MsgNet32.exe 
	
tested on win2000

MegaSecurity