Freddy K. Beta 1 server
(Backdoor.Win32.Delf.a)

by Norinco

Written in Delphi

Made in Germany

more versions




Server:
dropped file:
c:\WINDOWS\winapi.exe 

size: 484.352 bytes 

port: 21, 25555 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "winapi.exe" 

MegaSecurity