Written in Delphi

Released in April 2002

more versions

 

The server can disable:
AtGuard
Conseal
The Cleaner
BlackIce
ZoneAlarm
WinRoute


Server:
dropped files:
C:\WINDOWS\SERVER1_3.EXE   size: 683.008 bytes
c:\WINDOWS\mswin.ini

port: 831, 370 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 
c:\windows\win.ini "run"