Bear 1.0
(Backdoor.Win32.Delf.akt)

by ?

Written in Delphi

Released in September 2006

Made in China





Server:
c:\WINDOWS\system32\Explore.EXE
size: 36,740 bytes 

c:\WINDOWS\system32\Kernl32.dll
size: 39,424 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Network\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\C
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Network\Security



tested on Windows XP
November 07, 2006

MegaSecurity