ReVerSaBle 1.3
(Backdoor.Win32.Delf.qm)

by Infiltration

Written in Delphi

Released in August 2004

more versions


Server:
dropped file:
c:\WINNT\server.exe

size: 33.792 bytes
 
startup;
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "registry"
data: C:\WINNT\server.exe 

tested on win2000

MegaSecurity