Backdoor.Win32.Delf.afl
(Backdoor.Win32.Delf.afl)

by ?

Original name unknown

Written in Delphi, compressed with UPX

Probably made in Brazil

more in this category


dropped files:
c:\Documents and Settings\%user%\Application Data\Microsoft\Address Book\Kobayashi.wab
size: 176,212 bytes 

c:\WINDOWS\iexplore.exe
size: 6,154 bytes 

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\WAB\WAB4\Wab File Name

tested on Windows XP
January 02, 2006

MegaSecurity