Trojan Spirit 2001a Beta Edition
(Backdoor.Win32.Spirit.10)

by ThundeR God

Written in Delphi

Compressed with ASPack

Released in July 1999

Made in Brazil

more versions


Server:
dropped file:
c:\WINDOWS\netip.exe 

size: 264.192 bytes 

port: 33911 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Internet" 

c:\windows\win.ini, [windows] "run" 

MegaSecurity