FTPServer
(Backdoor.Delf.lb)

by ?

Written in Delphi

Made in China


dropped file:
c:\WINDOWS\SYSTEM\msgsvc.exe
size: 953.344 bytes

port: 87 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Msgtask"
data: C:\WINDOWS\SYSTEM\msgsvc.exe 

tested on Windows 98
November 07, 2004

MegaSecurity