Written in Delphi

Server compressed with ASPack

Server:
C:\WINDOWS\SYSTEM\REGSYS32.EXE 

size: 209 KB

port: 25002, 25885 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "Kernel32.dll" 


Added:
c:\WINDOWS\SYSTEM\regsys32.dll