Written in Delphi

more in this category

dropped files:
c:\WINDOWS\SYSTEM\boot.dat     Size: 34 bytes 
c:\WINDOWS\SYSTEM\SvaWa.exe    Size: 1.047.040 bytes 

port: 6711, 6718, 1234 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Boot Manager"
data: C:\WINDOWS\System\SvaWa.exe 


tested on Windows 98
October 14, 2005