Written in Delphi

dropped file:
c:\WINDOWS\system32\syswolf32.exe
size: 372,224 bytes 

port: 567 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SysWolf32"
data: C:\WINDOWS\System32\syswolf32.exe 




tested on Windows XP
June 04, 2005