Written in Delphi, compressed with UPX

Released in July 2004

more versions

Client:
port: 26666 TCP



Server:
c:\WINNT\system32\WINL0G0N.EXE

size: 22.528 bytes
 
port: 2600, 1118, 23333, 1119 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WINLOGON"

tested on win2000