8080PortHack
(Backdoor.Win32.Delf.yj)

by KaHiN

Written in Delphi

Released in January 2005

Made in Turkey


dropped file:
c:\Documents and Settings\%user%\Local Settings\Temp\dxdiag.scr
size: 35,897 bytes 

port: 8080 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "DirectX Diagnostic Tool"
data: C:\DOCUME~1\%user%\LOCALS~1\Temp\dxdiag.scr 



tested on Windows XP
November 25, 2005

MegaSecurity