Feri (c)
(Backdoor.Win32.Feri.c)

by ?

Written in Delphi, compressed with ASPack

Made in Hungary

more versions


Dropped file:
c:\WINDOWS\vbrun.exe 

size: 358.912 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft Visual Basic Runtime Library" 

MegaSecurity