Compressed with UPX

Released in October 1999

Made in Poland

more versions

Server:
dropped files:
c:\WINDOWS\SYSTEM\msftp.drv 
c:\WINDOWS\SYSTEM\Command.dll 
c:\WINDOWS\SYSTEM\ShlOpen32.dll 

size: 222.096 bytes

port: 800, 23, 44444, 230 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices 
HKCR\batfile\shell\open\command 
HKCR\comfile\shell\open\command 
HKCR\exefile\shell\open\command 

Added:
C:\WINDOWS\SYSTEM\mskbd.vxd