Backdoor.Win32.Delf.bc
(Backdoor.Win32.Delf.bc)

by ?

Original name unknown

Written in Delphi

more in this category


Dropped file:
c:\WINDOWS\winsoc.exe
size: 314,880 bytes 

port: 666 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winsoc"
data: C:\WINDOWS\winsoc.exe 





MegaSecurity