See Beast

Written in Delphi, compressed with ASPack

more versions

Server:
c:\Windows\System\mshost.exe

size: 176.640 bytes 


port: 666 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "COMService" 

added:
c:\WINDOWS\hostbk.exe 
c:\WINDOWS\SYSTEM\hservms.exe 
c:\WINDOWS\SYSTEM\kb.tlg