Donald Dick 1.53
(Backdoor.DonaldDick.135)
(TrojanDropper.Win32.Smorph)

by BadMan Forever & Yaworsky

Client is written in Delphi, server in C

Released in october 1999

Made in Russia

more versions


Server:
c:\WINDOWS\SYSTEM\pnpmgr.pci

port: 23476, 23477 TCP

startup:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\VMLDR "StaticVxD" 

added:
c:\WINDOWS\SYSTEM\jpegcomp.dll 
Size: 79.360 bytes 
c:\WINDOWS\SYSTEM\oleproc.exe 
Size: 164.352 bytes 
c:\WINDOWS\SYSTEM\pnpmgr.pci 
Size: 146.432 bytes 
c:\WINDOWS\SYSTEM\vmldr.vxd 
Size: 10.835 bytes 

MegaSecurity