Nerte 7.4.0
(Backdoor.Win32.Nerte.74)

by nerijust

Written in Delphi

Made in Lithuania

more versions


Server:
dropped file:
C:\WINDOWS\SCANREGS.EXE

size: 474 KB

port: 21, 80 TCP

startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

MegaSecurity