WOW
(Backdoor.Win32.Delf.adj)

by ?

Released in August 2005

Made in China


Server:
dropped file:
c:\Program Files\Internet Explorer\syssmss.exe
size: 233,472 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinsSystem"
data: C:\Program Files\Internet Explorer\syssmss.exe 

tested on Windows XP
February 07, 2006

MegaSecurity