Written in Delphi, compressed with PECompact

Released in December 2000

more versions

port: 113 TCP

dropped file:
c:\WINDOWS\Windows.exe
size: 10,240 bytes 

startup;
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows"
data: C:\WINDOWS\Windows.exe 

Attempts  to connect to an IRC server


tested on Windows XP
February 26, 2005