Lycaon 1.1
(Not detected by KAV on August 14, 2007)

by Lycaon

Written in Delphi, compressed with UPX

Released in November 2002

Made in Suriname




Server:
dropped files:
c:\WINNT\SuperUser32.Dat  size: 31.232 bytes 
c:\WINNT\SystDebug.Exe    size: 31.232 bytes 
c:\WINNT\winstart.bat     size: 108 bytes 

port: 13370 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System Debugger"
data: C:\WINNT\SystDebug.Exe 
	
tested on win2000
MegaSecurity