Psycho Derek 2.0 (a)
(Backdoor.Win32.Derek.20.a)

by BWSB

Invisible Telnet server

Written in Delphi, source included. Compressed with UPX

Released in October 1999

more versions


Server:
C:\WINDOWS\MSWLBXH8.EXE 
 
size: 50.176 bytes

port: 8681, 8682 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run 

added:
C:\WINDOWS\SYSTEM\MSWLBXH8.DLL

MegaSecurity