Dark FTP 1.1

Dark FTP 1.1
(Backdoor.Win32.DarkFtp.11)

by ~ W . A . V . E . R ~

Written in Delphi

Released on April 2000

Made in Italy




dropped file:
c:\WINDOWS\SYSTEM\MSREGSCN.EXE
size: 361.984 bytes 
	
port: 21 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MSRegScan"
data: C:\WINDOWS\SYSTEM\MSREGSCN.EXE 

tested on Windows 98
November 13, 2004

MegaSecurity