Psycho Derek 2.0 (b)
(Backdoor.Win32.Derek.20.b)

by BWSB

Invisible Telnet server

Written in Delphi, source included. Compressed with UPX

Released in October 1999

more versions


Server:
c:\WINDOWS\MSXTKOOB.EXE 
 
size: 50.688 bytes

port: 8681, 8682 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run 

added:
C:\WINDOWS\SYSTEM\MSXTKOOB.DLL 

MegaSecurity