Written in Delphi

Released in February 2002

more versions

Client:
port: 6506 TCP


Server:
dropped file:
C:\WINDOWS\SYSTEM\Shell32.exe 

size: 15.230 bytes

port: 31415, 31416 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Shell32"