by PA HAC
Written in Delphi
Released in September 2005
Made in Poland
Server: dropped file: c:\WINDOWS\sp2\sp2.exe size: 692,212 bytes port: 19860, 19861, 19862, 19863 TCP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Service Pack 2" data: C:\windows\sp2\sp2.exe tested on Windows XP October 07, 2005MegaSecurity