Written in Delphi

Released in January 2005

Made in China

Server:
size: 240,128 bytes

port: 1229 TCP, 1231 UDP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winrun"
data: C:\Documents and Settings\%user%\Desktop\%trojan%.exe      



tested on Windows XP
February 21, 2005