Compressed with ASPack

Released in September 2001

Made in China

Client:
port: 6711 TCP


Server:
dropped files:
C:\WINDOWS\SYSTEM\internat.exe
c:\WINDOWS\notepad.exe

size: 236.032 bytes

port: 9999, 6712 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices 
HKCR\txtfile\shell\open\command