Written in Delphi

Released in january 2003

Dropped Server:
c:\WINDOWS\synchost.exe 

size: 603.648 bytes 

port: 4999 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Remote Acces Slave"