Written in Delphi

Released in January 2001

dropped files:
c:\MDIOCTL.EXE                                Size: 22,528 bytes 
c:\Program Files\Outlook Express\_MSIMN.EXE   Size: 57,344 bytes 
c:\Program Files\Outlook Express\WABERES.DLL  Size: 22,528 bytes 
c:\WINDOWS\MDIOCTL.EXE                        Size: 22,528 bytes 

startup:
none

attempts to connect to a site in Russia


tested on Windows XP
September 29, 2005