Feri (a)
(Backdoor.Win32.Feri.a)

by ?

Written in Delphi, compressed with ASPack

Made in Hungary

more versions


Dropped file:
c:\WINDOWS\vbrun.exe
size: 151,040 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsoft Visual Basic Runtime Library"
data: C:\WINDOWS\vbrun.exe 



tested on Windows XP
March 13, 2005

MegaSecurity