(Backdoor.Win32.DarkFtp.11)
by ~ W . A . V . E
. R ~
Written in
Delphi
Released on
April 2000
Made in Italy
dropped file:
c:\WINDOWS\SYSTEM\MSREGSCN.EXE
size: 361.984 bytes
port: 21 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
"MSRegScan"
data: C:\WINDOWS\SYSTEM\MSREGSCN.EXE
tested on Windows 98
November 13, 2004
|
