Pex
(Backdoor.Win32.Delf.io)

by Bart

Written in Delphi

Released in October 2003

Made in Poland


Server:
dropped file:
c:\WINDOWS\SYSTEM\WinTask.exe 

size: 194.539 bytes

port: 1900 TCP

startup;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft dllLoader" 

MegaSecurity