Backdoor.Win32.Delf.ae
(Backdoor.Win32.Delf.ae)

by ?

Original name unknown

Written in Delphi, compressed with ASPack

more in this category


dropped files:
c:\WINDOWS\system\HOOKDLL.dll    Size: 10,752 bytes 
c:\WINDOWS\system\msapss32.exe   Size: 81,152 bytes 

port: 6767 UDP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "msapss32"
data: C:\WINDOWS\SYSTEM\msapss32.exe 



tested on Windows XP
February 25, 2005

MegaSecurity