Written in Delphi

Made in Bulgaria

dropped file:
c:\WINDOWS\system32\winxcfg.exe size: 72,704 bytes 
C:\WINDOWS\system32\msiexc6.exe size: 9,248 bytes
C:\WINDOWS\system32\msiexc.exe  size: 32,256 bytes

port: 9437, 8664, 9664 TCP 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winxcfg.exe"
data: C:\WINDOWS\System32\winxcfg.exe 



tested on Windows XP
March 03, 2005