Written in Delphi, compressed with ASPack

Released in September 2004

more versions

Server:
dropped file:
c:\WINNT\Kernel32.dlI

size: 214.080 bytes
 
port: 4648, 6543, 45645 TCP

added to registry:
HKEY_CLASSES_ROOT\.dli "(Default)"
data: dlifile 

HKEY_CLASSES_ROOT\dlifile\shell\open\command "(Default)"
data: %1 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Kernel32"
data: Kernel32.dlI 

tested on Win2000