Written in Delphi

Made in Argentina

more versions

Server:
dropped files:
c:\WINNT\usr.dat              size: 89 bytes 
c:\WINNT\system32\Rundll.exe  size: 37.464 bytes
 
port: 31320 TCP

added to registry:
HKEY_CURRENT_USER\Software\Msn "Date"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Rundll"
data: Rundll.exe 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial"

tested on Win2000