Written in Delphi

Made in Russia

Released on August 27, 2002

more versions

Server:
dropped files:
c:\WINDOWS\SYSTEM\krnl368.exe 
c:\WINDOWS\SYSTEM\Explorer.exe 

size: 402 KB

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "(Default)" 
HKCR\exefile\shell\open\command "(Default)"