OICQsearch 1.3
(Backdoor.Win32.Delf.u for Server)

by ?

Written in Delphi

Released in May 2001

Made in China

more versions


Server:
dropped files:
c:\WINDOWS\SYSTEM\Carved.jpq
c:\WINDOWS\SYSTEM\scanregw.exe

size: 321.024 bytes

port: 102 TCP

startup:
HKCR\txtfile\shell\open\command
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

MegaSecurity