Written in Delphi

Released in April 2004

Made in China

more versions

Server:
c:\WINNT\RUNDLLL.EXE 

size: 239.616 bytes

port: 4778 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run "KAV"
data: C:\WINNT\RUNDLLL.EXE

tested on win2000
November 09, 2004