Written in Delphi

Released in November 2005

Made in China

more versions

dropped file:
c:\WINDOWS\system32\svchoxt.exe
size: 25,900 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "svchoxt"
data: C:\WINDOWS\System32\svchoxt.exe [System Process]@ # [SYSTEM PROCESS]` # [System Process]� # [SYSTEM PROCESS]  QQ.E� Syst� Syst� SYST� QQ.E


tested on Windows XP
December 26, 2005