Portal of Doom 3.0
(Backdoor.Win32.PoD)

by HackCity

Client written in Visual Basic, server in Delphi

Released in April 1999


Server:
dropped file:
C:\WINDOWS\SYSTEM\LJSGZ.EXE

size: 112 KB

port:  10067, 3700, 9872, 9873, 9874, 9875, 10167 TCP
       10067, 10167 UDP
	   
startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices	    

MegaSecurity