Dark Connection Inside 1.2
(Backdoor.Win32.DCI.12)

by StoLenbYTe

Written in Delphi

Released in September 1999


Dropped files:
C:\WINDOWS\SYSTEM\MSGSRV16.EXE
C:\WINDOWS\SYSTEM\DIRECTX3D.EXE

size: 194 KB

port: 666 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

MegaSecurity