Syphillis 1.18 (a)
Backdoor.Win32.Syph.a

by Syphillis

Written in Delphi, source included

Released in October 1999

more versions



server:
dropped files:
c:\WINDOWS\SYSTEM\Shell32.exe  size: 327.168 bytes 
c:\WINDOWS\SYSTEM\Shell32.log  size: 225 bytes 

port: 10085

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Win32 Shell"
data: Shell32.exe 

MegaSecurity