Slh RAT
(Backdoor.Win32.Delf.awq)
(Not detected by KAV for Server on April 18, 2007)

by SantasDad

Written in Delphi

Released in September 2006

more versions 






Server:
size:125,952 bytes

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7F7829E2-0497-494B-A30A-B8CF761CA744} "StubPath"



tested on Windows XP
January 31, 2007
MegaSecurity