Van Hellsing 1.0
(Backdoor.Win32.Delf.anc )

by Mugem

Written in Delphi, compressed with UPX

Released in August 2004


Server:
added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Ms Conf"
data: C:\WINNT\system32\msconf.exe 

dropped file:
c:\WINNT\system32\msconf.exe
size: 231.434 bytes

tested on Win2000 

MegaSecurity