Written in Delphi

Released in June 2006

Made in Turkey

Server:
dropped files:
c:\WINDOWS\drwtsn32.exe    Size: 179,712 bytes 
c:\WINDOWS\ft.dat          Size: 118 bytes 
c:\WINDOWS\nkd.dat         Size: 1,163 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Explorer"
data: C:\WINDOWS\drwtsn32.exe 



tested on Windows XP
August 15, 2006