| Name: | Theef |
| Aliases: | Backdoor.Theef, BackDoor.QW, Bkdr_Delf.AX, |
| Ports: | 69, 1000, 1001, 1005, 2800, 3000, 4700, 7000, 13500 |
| Files: | Theef1.1.zip - 852,928 bytes Theef1.2.zip - 1,419,836 bytes Theef1.21.zip - Theef1.30.zip - Theef1.31.zip - Theef1.34.zip - Theef1.37.zip - Theef_137.zip - 1,507,346 bytes Theefedit130.zip - 210,827 bytes Cgilogger.zip - Dloader.zip - Client.exe - 452,608 bytes Client.exe - 804,352 bytes Client137.exe - 893,952 bytes Server.exe - 424,960 bytes Server.exe - 1,334,272 bytes Server137.exe - 438,278 bytes Editserver.exe - 217,600 bytes Editserver137.exe - 218,112 bytes Dllrun.exe - Upx.exe - 89,600 bytes Rundll133.sys - Window.exe - Ocxreg.exe - Sysdamon.exe - Lib32.exe - |
| Created: | May 2001 |
| Requires: | |
| Actions: | Anti-protection trojan / Remote Access / Keylogger / Port proxy / FTP server / Remote peeker |
| Registers: | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\ | |
| Notes: | Works on Windows 95, 98, ME, NT and XP. |
| Country: | written in Germany |
| Program: | Written in Borland Delphi 3.0 and 5.0. |