FireFox1
(Backdoor.Win32.Delf.vr)

by p0ke, modified by ?

Written in Delphi, based on Source of Penis 1.0

Released in April 2005




Server:
dropped file:
c:\WINNT\system32\penis32.exe
size: 39,938 bytes 
	
port: 1337 TCP



tested on Windows XP
May 26, 2005

MegaSecurity