ShpinControl
(Backdoor.Win32.Delf.aot)

by ?

Written in Delphi

Released in November 2005

Made in China





Server:
dropped file:
c:\WINDOWS\system32\Vrwx.exe
size: 260,224 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Videorwx
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Videorwx




tested on Windows XP
February 24, 2007

MegaSecurity