Erazer Lite 0.3
(Backdoor.Win32.Delf.zg)
(Backdoor.Win32.Delf.vn for Server)

by (v)aster

Written in Delphi

Released in June 2005

Made in Austria

more versions


-----------

(v)aster  


Server:
dropped file:
c:\WINDOWS\system32\msiecfg.exe
size: 34,028 bytes 

port: 80 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "IEXPLORER"
data: C:\WINDOWS\System32\msiecfg.exe 
	
	
tested on Windows XP
July 02, 2005

MegaSecurity