by Norinco
Written in Delphi
Released in March 2001
Made in Germany
Server: dropped file: C:\WINDOWS\winapi.exe size: 305.191 bytes port: 22554, 25556 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "winapi.exe" added: c:\WINDOWS\winapi.dll c:\WINDOWS\TEMP\MicroNet.DLLMegaSecurity