by ErCaN
Written in Delphi
Released in January 2006
Made in Turkey
Server: dropped file: c:\WINDOWS\system32\winserv.exe size: 204,290 bytes startup: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "winserv" data: C:\WINDOWS\System32\winserv.exe tested on Windows XP February 26, 2006MegaSecurity