aka AttackBot

Written in Delphi

dropped files:
c:\WINDOWS\sysadmin.exe
size: 445.440 bytes 

startup:
c:\windows\win.ini, [windows] "run"
value: C:\WINDOWS\sysadmin.exe 


tested on Windows XP
December 20, 2004