haMtaRo MEGA
(Backdoor.Win32.Delf.ayz)

by MaLy

Written in Delphi

Released in October 2006

Made in Poland

more versions


Server:
dropped file:
c:\WINDOWS\svchost.exe
size: 725,504 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "svchost"
data: C:\Windows\svchost.exe 	



	
tested on Windows XP
March 09, 2007

MegaSecurity