GregStar Trojan 1.1

GregStar Trojan 1.1
(Backdoor.Win32.Pazus.b)
(Constructor.Win32.Delf.as)
(Backdoor.Win32.Pazus.a)

by gregstar

Written in Delphi

Released in January 2005




Server:
dropped file:
c:\system.exe
size: 746,184 bytes 

port: 21, 4444 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GG"
data: C:\system.exe 




tested on Windows XP
April 30, 2005

MegaSecurity