by Norinco
Written in Delphi
Released in October 2000
Made in Germany
Server: dropped file: c:\WINDOWS\winapi.exe size: 314.223 bytes port: 21, 22555 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "winapi.exe"MegaSecurity