Backdoor.Win32.Delf.rx
(Backdoor.Win32.Delf.rx)

by ?


Written in Delphi, compressed with UPX


more in this category


dropped file:
c:\Program Files\PornoTop\ptop.exe
size: 231,424 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "PornoTop"
data: "C:\Program Files\PornoTop\ptop.exe" hide 



tested on Windows XP
August 03, 2005

MegaSecurity