PSYchoFiles 1.9
(Backdoor.Win32.Psyf.181)

by PSYcho

Written in Delphi

Made in Russia

more versions


Client:
port: 20000 TCP


Server:
dropped file:
C:\WINDOWS\Config.exe 

size: 156 KB

port: 20001, 20002 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "ApplicationRun" 

MegaSecurity