Written in Delphi

Released in January 2006

Made in Iran

more versions

dropped file:
c:\Documents and Settings\%user%\Local Settings\Temp\InterBase.exe
size: 9,039 bytes 

port: 979 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "InterBase"
data: C:\DOCUME~1\%user%\LOCALS~1\Temp\InterBase.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SecurityCenter"
data: C:\DOCUME~1\%user%\LOCALS~1\Temp\InterBase.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runservices "InterBase"
data: C:\DOCUME~1\%user%\LOCALS~1\Temp\InterBase.exe 

tested on Windows XP
January 17, 2006