Backdoor.Win32.Delf.ci
(Backdoor.Win32.Delf.ci)

by ?

Real name unknown

Written in Delphi

Released in September 2002

more in this category


message shown by server



Dropped file:
c:\WINDOWS\SYSTEM\win32d11.exe 

size: 510.464 bytes 

port: 3333, 10150 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "(Default)" 

added:
c:\WINDOWS\SYSTEM\desktop.bmp 

MegaSecurity