Ghost 1.0
(Backdoor.Win32.Delf.cz)
(Backdoor.Win32.Delf.jpn)

by Yu Guang Wai

aka Screen-Thief

Written in Delphi, compressed with ASPack

Released in October 2002

more versions


Server:
size: 204.288 bytes

port: 1119 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "notepad" 

MegaSecurity