Written in Delphi, compressed with UPX

Made in China

Released in 2000

more versions

Client:
port: 7718 TCP


Server:
C:\WINDOWS\SYSTEM\KERNEL32.EXE 
C:\WINDOWS\SYSTEM\SYSEXPLR.EXE 

size: 266.381 bytes

port: 7626 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices 
HKEY_CLASSES_ROOT\txtfile\shell\open\command