Pinochet 1.0
(Backdoor.Win32.Antilam.g1)

by Shniaga

Clone of  Latinus

Written in Delphi

Released in 2001

Made in Russia

more versions


Server:
dropped file:
C:\WINDOWS\SYSTEM\avpres32dll.exe 

size: 161 KB

port: 55665, 55666 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "AVP monitor resurse" 

MegaSecurity