Backdoor.Win32.Delf.rz
(Backdoor.Win32.Delf.rz)

by ?

Original Filename: mIRC_AntiVirus.zip

Written in Delphi

Made in Brazil

Released in 2004

more in this category


size: 162,816 bytes

dropped files:
c:\Arquivos de programas\Acessórios\SCRIPT1.mrc
size: 417 bytes 

c:\Arquivos de programas\Arquivos comuns\InstallShield\Engine\6\Intel 32\{332654785113541.2265441265}\Systems Files\uyx999tGhwinboost.exe
size: 162,816 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MTaskRWindows"
data: C:\Arquivos de programas\Arquivos comuns\InstallShield\Engine\6\Intel 32\{332654785113541.2265441265}\Systems Files\uyx999tGhwinboost.exe 


tested on Windows XP
January 08, 2005

MegaSecurity