RemotanZ - Clone
(Backdoor.Win32.Delf.bn for Server)

by Z-Software

Written in Delphi

Released in February 1999

Made in Germany


The so-called control server is a normal POP3-Account-Server, 
with which the command mails are send and received..

Z-Software


Server:
size: 578.560 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "sysexplorer" 

added:
c:\WINDOWS\OLDCLONE.DAT 
c:\WINDOWS\SYSTEM\ID.INI 

changed:
c:\windows\winstart.bat 

MegaSecurity