Written in Delphi, compressed with PECompact

Released in november 2002

image shown by server

Server:
c:\WINDOWS\Plugins.exe 

size: 229.376 bytes
 
port: 8084 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "ObjectVerify" 

dropped files:
c:\%current dir%\mypic.jpg 
c:\WINDOWS\Plugins.exe 
c:\WINDOWS\SYSTEM\msdlg32.dll