Gothic Intruder 1.1
(Backdoor.Win32.Delf.ie)

by GOTHIC

Written in Delphi

Released in August 2000

Made in Brazil


Server:
dropped file:
C:\WINDOWS\SYSTEM\vbrundll.exe 

size: 506.368 bytes

port: 1000, 1001, 2000 TCP
                  2000 UDP
startup: 
HKCU\Software\Microsoft\Windows\CurrentVersion\Run 

MegaSecurity