Original Filename unknown

Written in Delphi

Related to Backdoor.Delf.hq and Backdoor.Win32.Delf.va

more in this category

dropped file:
c:\WINDOWS\system32\mmtask.exe
size: 723,968 bytes 

port: 7618 TCP

startup:
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)"
old data: "%1" %* 
new data: C:\WINDOWS\System32\mmtask.exe "%1" %* 

tested on Windows XP
September 25, 2005