X_Admin 1.0
(Backdoor.Win32.Delf.aqa for Client)
(Backdoor.Win32.Delf.blz for Server)
(Backdoor.Win32.Delf.kdv for Kernl32.dll)

by xgym

Written in Delphi

Released in July 2007

Made in China 





Server:
c:\WINDOWS\system32\Kernl32.dll    Size: 41,984 bytes 
c:\WINDOWS\system32\RAVMOND.EXE    Size: 81,084 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MicIE "ImagePath"
data: C:\WINDOWS\System32\RAVMOND.EXE -service 
	
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicIE "ImagePath"
data: C:\WINDOWS\System32\RAVMOND.EXE -service 
		

tested on Windows XP
July 24, 2007
MegaSecurity