MSN Socket Tools 1.9.6 Beta
(Backdoor.Win32.Delf.lmq for Builder.exe)
(Not detected by KAV on September 13, 2008)

by Sinapse Elite Coders

Written in Delphi

Released in July 2008

more versions


Server
c:\WINDOWS\Temp\svchost.exe
Size: 295,424 bytes 


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SystemHost"
Data: C:\WINDOWS\Temp\svchost.exe 



Tested on Windows XP
August 04, 2008

MegaSecurity