Written in Delphi, Source included

Released in

Server
dropped files:
c:\save.txt
c:\WINDOWS\system32\drivers\lsass.exe    Size: 164,864 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "(Default)"
data: C:\WINDOWS\system32\drivers\lsass.exe WTM 




tested on Windows XP
March 10, 2007