MSN Socket Tools Lite 1.4
(Backdoor.Win32.Delf.ayw)

by Sinapse Elite Coders

Written in Delphi

Released in April 2007

more versions


Server:
dropped file:
c:\WINDOWS\csrss.exe
size: 577,536 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "csrss.exe"
data: C:\WINDOWS\csrss.exe 



tested on Windows XP
April 23, 2007

MegaSecurity