Written in Delphi

Released in October 2003

Made in Suriname

more versions

Server:
dropped files:
c:\WINDOWS\winlogin.exe    size: 812.546 bytes 
c:\WINDOWS\xpcore.dll      size: 50.688 bytes 

port: 7776 TCP

startup:
HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run "winlogin"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "winlogin" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "winlogin"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "winlogin"