TGA BackDoor 1.0
(Backdoor.Win32.Delf.ant for Server)

by TGA

Written in Delphi, source included

Released in September 2005

Made in Brazil

more versions


Server:
dropped file:
c:\WINDOWS\Servidor.exe
size: 414,208 bytes 

port: 2005 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "FireWall"
data: C:\WINDOWS\Servidor.exe 



tested on Windows XP
May 21, 2006

MegaSecurity