Written in MASM

Released in February 2004

Made in Russia

more versions

Server:
size: 33.264 bytes

port: 16661 TCP

dropped files:
c:\WINDOWS\SYSTEM\debugg.dll  
c:\WINDOWS\SYSTEM\c3.dll 
c:\WINDOWS\SYSTEM\incoming.a3d 
c:\WINDOWS\SYSTEM\klogini.dll 
c:\WINDOWS\SYSTEM\page2.ini 
c:\WINDOWS\SYSTEM\w32_ss.exe 
c:\WINDOWS\SYSTEM\klog.sys 

registry added:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MPRServices\TestService 

(tested on win98)