Backdoor.Win32.Delf.fe
(Backdoor.Win32.Delf.fe)

by ?

Original Filename unknown

Written in Delphi

more in this category


dropped file:
c:\WINDOWS\info.dat
size: 67 bytes 

port: 65535 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "iddono2Server"
data: C:\WINDOWS\iddono418.exe 



tested on Windows XP
June 12, 2005

MegaSecurity