Nucker
(Backdoor.Win32.Nucker)

by ?

Written in Delphi



Server:
c:\WINDOWS\winprot.exe 

size: 53.248 bytes 

port: 1000 TCP & UDP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WinProt" 

MegaSecurity