Keylogger and Webdownloader

Written in Delphi

Released in july 2003

Server:
size: 22.530 bytes

changed:
c:\windows\system.ini, [boot] "shell" 

added (win200):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" 


remark:
no restart, "C:\WINDOWS\SYSTEM\krnl354.exe" was not created