DHCP Own3r 0.55
(Trojan-Spy.Win32.Delf.bvo)

by Drgiro

Written in Delphi

Released in March 2008

Made in Poland



Server
c:\WINDOWS\Expl0rer.exe    Size: 558,120 bytes 
c:\WINDOWS\irc.ini         Size: 17 bytes 
c:\WINDOWS\key.zrt         Size: 6 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Expl0rer"
Data: C:\WINDOWS\expl0rer.exe 


Tested on Windows XP
March 20, 2008

MegaSecurity