Written in Delphi

Released in January 2003

Made in Poland

Server:
dropped file:
c:\WINDOWS\SYSTEM32\SVCHOST.exe
 
size: 391.680 bytes
 
port: 6000 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SVCHOST"
data: C:\WINDOWS\system32\SVCHOST.exe