Written in Delphi, compressed with UPX

Released in August 2004

more versions

Server:
dropped file:
c:\WINDOWS\system32\EXPL0RER.EXE
size: 27,648 bytes 

port: 800 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WINLOGON"
data: WINL0G0N.EXE 

tested on Windows XP
March 05, 2006