FuckTrojan 1.2 Chinese version
(Backdoor.Win32.Delf.mz)

by [mAd_cAt]

Written in Delphi

Released in September 2004

Made in Bulgaria

more versions


Client:
port: 7777 TCP


Server:
dropped file:
c:\WINNT\system32\Isass.exe    Size: 234,496 bytes 

port: 666, 6664, 6665 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Isass"
data: C:\WINNT\system32\Isass.exe 



tested on Windows 2000
July 08, 2005

MegaSecurity