PSYchoFTP 1.1
(Backdoor.Win32.Psyf.14)

by PSYcho

Written in Delphi

Made in Russia

more versions


Server:
dropped file:
c:\WINDOWS\socket.exe 

size: 416.768 bytes
 
port: 21 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WindowsSocket" 

MegaSecurity