Written in Delphi

Released in July 2002

more versions

Server:
dropped files:
c:\WINDOWS\EXECUTION.EXE   Size: 494.592 bytes
c:\WINDOWS\KeyHook.dll 
c:\WINDOWS\SYSTEM\Execution.exe  

port: 12345, 12346 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "EXECUTION"