Netsys 3.6
(Backdoor.Win32.Delf.ns)

by Zhou Jian

Written in Delphi

Released in May 2004

Made in China


Server:
c:\Program Files\Remote\RUNDLLL.exe 

size: 380.928 bytes

port: 4778 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "sys"

MegaSecurity