by Norinco
Written in Delphi
Released in February 2000
Made in Germany
Server: dropped file: C:\WINDOWS\winapi.exe size: 249.856 bytes port: 21, 22554 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "winapi.exe"MegaSecurity