Written in Delphi, compressed with ASPack

more in this category

Backdoor.Win32.Delf.ey:
dropped files:
c:\WINDOWS\Loader32.exe    Size: 47,616 bytes 
c:\WINDOWS\taskmgr.tsk     Size: 1 bytes 

startup;
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Dynamic Link Library loader"
data: C:\WINDOWS\Loader32.exe 



tested on Windows XP
June 11, 2005