Written in Delphi

Released in May 2004

Made in China

more versions

Server:
dropped file:
c:\Program Files\Remote\RUNDLLL.exe
size: 363.520 bytes
 
port: 4778 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "sys"
data: C:\Program Files\Remote\RUNDLLL.exe 
	
tested on win2000