by SyberTron
Written in Delphi
Backdoor.Win32.Delf.ef: dropped file: c:\WINDOWS\system32\Core64x.exe size: 559,104 bytes startup: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows.NET" data: C:\WINDOWS\System32\Core64x.exe attempts to connect to an IRC Server tested on Windows XP May 27, 2005MegaSecurity