Dark FTP 1.3
(Backdoor.Win32.DarkFtp.13)
(Backdoor.Win32.DarkFtp.14)

by ~ W . A . V . E . R ~

Written in Delphi

Released on April 2000

Made in Italy

more versions

 




dropped file:
c:\WINDOWS\SYSTEM\msregscn.whi
size: 361.984 bytes 
	
port: 21 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MSRegScan"
data: C:\WINDOWS\SYSTEM\MSREGSCN.EXE 

tested on Windows 98
November 13, 2004
MegaSecurity