Homiak
(Backdoor.Win32.Homiak)

by ?

Written in Delphi, compressed with ASPack




Server:
dropped files:
c:\WINDOWS\POlNT32.EXE   Size: 227.840 bytes 
c:\WINDOWS\xdaemon.dat 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "POlNTER" 


Tries to connect to specified IRC servers and joins channel #homiaki to listen for commands 

MegaSecurity