Made in Russia

more versions

dropped files:
c:\WINDOWS\system32\Gmoeffjc.dll    size: 6,145 bytes 
c:\WINDOWS\system32\Khgmje32.exe    size: 58,616 bytes 

port: 52, 32121, 23232, 18601 TCP

added to registry:
HKEY_CLASSES_ROOT\CLSID\{79FB9088-19CE-715E-D900-216290C5B738}
HKEY_CLASSES_ROOT\CLSID\{79FB9088-19CE-715E-D900-216290C5B738}\InProcServer32

tested on Windows XP
January 12, 2005