Written in Delphi, compressed with PECompact

Released in January 2002

Made in Russia

Server:
dropped file:
C:\WINDOWS\DNS32.dll.exe 

size: 246.784 bytes

port: 1987 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "DNS32.dll.exe" 
c:\windows\win.ini, "run"