Written in Delphi

Clone of  Latinus

more versions

Server:
dropped file:
C:\WINDOWS\mxhlp32.exe 

size: 404 KB

port: 11831, 29559 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "MxHLp32"