Backdoor.Win32.Delf.ni
(Backdoor.Win32.Delf.ni)

by ?

Written in Delphi

more in this category


size: 891,392 bytes

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "CRSS"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "CRSS" 

attempts to connect to an IRC Server



tested on Windows XP
July 24, 2005

MegaSecurity