Based on source of  Latinus

Written in Delphi

more versions

Server:
dropped file:
C:\WINDOWS\SYSTEM\RegServ.exe 

port: 29559, 11831 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run