Written in Delphi

Released in August 2004

Made in Poland

more versions

 

server

Server:
dropped file:
c:\WINDOWS\vhost.exe

port: 1789, 1790, 1711, 1710, 1793, 1794, 1795, 1797, 1798, 1721, 1740, 1796, 2005 TCP TCP

startup;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "LoadProfile"
data: c:\windows\vhost.exe