Written in Delphi

Released in February 2005

more versions

Server:
dropped files:
c:\WINDOWS\system32\EXPL0RER.EXE
size: 61,952 bytes 

port: 800, 2600, 25555 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WINLOGON"
data: WINL0G0N.EXE 



tested on Windows XP
March 04, 2005