AngelShell 1.0
(Backdoor.Win32.Delf.wx)

by ?

Written in Delphi

Released in February 2005

Made in China


dropped files:
c:\WINNT\system32\Angel.dll
size: 142,336 bytes 

port: 3721 TCP

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmdmPmSN\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmdmPmSN\Enum



tested on Windows 2000
March 18, 2005

MegaSecurity