Written in Visual Basic

Made in Poland

more versions

Server:
dropped file:
C:\WINDOWS\SYSTEM\WINSYS.EXE

size: 164 KB

port: 23321 TCP

startup:
c:\windows\win.ini
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run