Backdoor.Win32.Delf.qi
(Backdoor.Win32.Delf.qi)

by ?

Original Filename unknown

Written in Delphi

more in this category



dropped files:
c:\WINDOWS\system32\bfiexplo.exe    Size: 1,135,104 bytes 
c:\WINDOWS\system32\bfiexplo.txt    Size: 5 bytes 
c:\WINDOWS\system32\iexplorc.exe    Size: 1,135,104 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "iexplorc"
data: C:\WINDOWS\System32\iexplorc.exe @123 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "iexplorc"
data: C:\WINDOWS\System32\iexplorc.exe @123 


tested on Windows XP 
February 11, 2006

MegaSecurity